Linux 5.15.189
by Greg Kroah-Hartman
I'm announcing the release of the 5.15.189 kernel.
All users of the 5.15 kernel series must upgrade.
The updated 5.15.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.15.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Makefile | 2
arch/um/drivers/vector_kern.c | 42 -
arch/x86/Kconfig | 2
arch/x86/include/asm/cpufeatures.h | 2
arch/x86/include/asm/xen/page.h | 3
arch/x86/kernel/cpu/mce/amd.c | 15
arch/x86/kernel/cpu/mce/core.c | 8
arch/x86/kernel/cpu/mce/intel.c | 1
drivers/acpi/battery.c | 19
drivers/atm/idt77252.c | 5
drivers/block/aoe/aoeblk.c | 5
drivers/block/nbd.c | 6
drivers/dma-buf/dma-resv.c | 171 ++++---
drivers/gpu/drm/drm_gem.c | 10
drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4
drivers/hid/hid-ids.h | 6
drivers/hid/hid-lenovo.c | 8
drivers/hid/hid-multitouch.c | 8
drivers/hid/hid-quirks.c | 3
drivers/infiniband/hw/mlx5/main.c | 33 +
drivers/input/joystick/xpad.c | 2
drivers/input/keyboard/atkbd.c | 3
drivers/md/raid1.c | 1
drivers/md/raid10.c | 10
drivers/net/can/m_can/m_can.c | 2
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2
drivers/net/ethernet/intel/ice/ice_main.c | 29 -
drivers/net/ethernet/xilinx/ll_temac_main.c | 2
drivers/net/phy/microchip.c | 2
drivers/net/phy/smsc.c | 28 +
drivers/net/usb/qmi_wwan.c | 1
drivers/net/virtio_net.c | 44 +
drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6
drivers/pinctrl/qcom/pinctrl-msm.c | 20
drivers/pwm/pwm-mediatek.c | 15
drivers/thermal/intel/int340x_thermal/int3400_thermal.c | 9
drivers/tty/hvc/hvc_xen.c | 2
drivers/tty/vt/vt.c | 1
drivers/usb/cdns3/cdnsp-debug.h | 358 +++++++---------
drivers/usb/cdns3/cdnsp-ep0.c | 18
drivers/usb/cdns3/cdnsp-gadget.c | 6
drivers/usb/cdns3/cdnsp-gadget.h | 11
drivers/usb/cdns3/cdnsp-ring.c | 27 -
drivers/usb/dwc3/core.c | 9
drivers/usb/dwc3/gadget.c | 22
drivers/usb/gadget/function/u_serial.c | 6
drivers/usb/host/xhci-mem.c | 4
drivers/usb/host/xhci-pci.c | 30 +
drivers/usb/host/xhci-plat.c | 3
drivers/usb/host/xhci.h | 1
drivers/vhost/scsi.c | 7
drivers/xen/grant-table.c | 6
drivers/xen/xenbus/xenbus_probe.c | 3
fs/btrfs/inode.c | 36 -
fs/jfs/jfs_dtree.c | 2
fs/ksmbd/transport_rdma.c | 5
fs/ksmbd/vfs.c | 1
fs/proc/array.c | 6
fs/proc/inode.c | 2
fs/proc/proc_sysctl.c | 18
include/drm/drm_file.h | 3
include/drm/spsc_queue.h | 4
include/linux/dma-resv.h | 95 ++++
include/net/netfilter/nf_flow_table.h | 2
include/xen/arm/page.h | 3
kernel/bpf/verifier.c | 21
kernel/events/core.c | 2
kernel/rseq.c | 60 ++
net/appletalk/ddp.c | 1
net/atm/clip.c | 64 ++
net/core/skmsg.c | 12
net/ipv6/addrconf.c | 9
net/netlink/af_netlink.c | 82 ++-
net/rxrpc/call_accept.c | 3
net/sched/sch_api.c | 23 -
net/tipc/topsrv.c | 2
net/vmw_vsock/af_vsock.c | 57 ++
sound/soc/fsl/fsl_asrc.c | 3
79 files changed, 1015 insertions(+), 546 deletions(-)
Akira Inoue (1):
HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
Al Viro (2):
fix proc_sys_compare() handling of in-lookup dentries
ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
Alok Tiwari (1):
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
Andrii Nakryiko (1):
bpf: fix precision backtracking instruction iteration
Bartosz Golaszewski (1):
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
Basavaraj Natikar (1):
xhci: Allow RPM on the USB controller (1022:43f7) by default
Bui Quang Minh (1):
virtio-net: ensure the received length does not exceed allocated size
Chia-Lin Kao (AceLan) (1):
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Christian König (3):
dma-buf: add dma_resv_for_each_fence_unlocked v8
dma-buf: use new iterator in dma_resv_wait_timeout
dma-buf: fix timeout handling in dma_resv_wait_timeout v2
Daniil Dulov (1):
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
David Howells (1):
rxrpc: Fix oops due to non-existence of prealloc backlog struct
Dongli Zhang (1):
vhost-scsi: protect vq->log_used with vq->mutex
Edward Adam Davis (1):
jfs: fix null ptr deref in dtInsertEntry
Eric Dumazet (1):
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
Filipe Manana (2):
btrfs: propagate last_unlink_trans earlier when doing a rmdir
btrfs: use btrfs_record_snapshot_destroy() during rmdir
Greg Kroah-Hartman (1):
Linux 5.15.189
Guillaume Nault (1):
gre: Fix IPv6 multicast route creation.
Hans de Goede (1):
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
Hongyu Xie (1):
xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
JP Kobryn (1):
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
Jack Wang (1):
x86: Fix X86_FEATURE_VERW_CLEAR definition
Jakub Kicinski (1):
netlink: make sure we allow at least one dump skb
Jann Horn (1):
x86/mm: Disable hugetlb page table sharing on 32-bit
Jesse Brandeburg (1):
ice: safer stats processing
John Fastabend (1):
bpf, sockmap: Fix skb refcnt race after locking changes
Juergen Gross (1):
xen: replace xen_remap() with memremap()
Kaustabh Chakraborty (1):
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
Kito Xu (1):
net: appletalk: Fix device refcount leak in atrtr_create()
Kuen-Han Tsai (2):
usb: gadget: u_serial: Fix race condition in TTY wakeup
usb: dwc3: Abort suspend on soft disconnect failure
Kuniyuki Iwashima (6):
netlink: Fix wraparounds of sk->sk_rmem_alloc.
tipc: Fix use-after-free in tipc_conn_close().
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
atm: clip: Fix memory leak of struct clip_vcc.
atm: clip: Fix infinite recursive call of clip_push().
netlink: Fix rmem check in netlink_broadcast_deliver().
Lee Jones (1):
usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
Lee, Chun-Yi (1):
thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
Maksim Kiselev (1):
aoe: avoid potential deadlock at set_capacity
Matthew Brost (1):
drm/sched: Increment job count before swapping tail spsc queue
Michael Jeanson (1):
rseq: Fix segfault on registration when rseq_cs is non-zero
Michal Luczaj (3):
vsock: Fix transport_{g2h,h2g} TOCTOU
vsock: Fix transport_* TOCTOU
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
Nicolas Pitre (1):
vt: add missing notification when switching back to text mode
Nigel Croxon (1):
raid10: cleanup memleak at raid10_make_request
Nilton Perim Neto (1):
Input: xpad - support Acer NGR 200 Controller
Oleg Nesterov (1):
fs/proc: do_task_stat: use __for_each_thread()
Oleksij Rempel (3):
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
Patrisious Haddad (1):
RDMA/mlx5: Fix vport loopback for MPV device
Pawel Laszczak (2):
usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
usb: cdnsp: Fix issue with CV Bad Descriptor test
Peter Zijlstra (1):
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Rafael J. Wysocki (1):
Revert "ACPI: battery: negate current when discharging"
Raju Rangoju (1):
usb: xhci: quirk for data loss in ISOC transfers
Sean Nyekjaer (1):
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
Shengjiu Wang (1):
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
Shravya KN (1):
bnxt_en: Fix DCB ETS validation
Simona Vetter (1):
drm/gem: Fix race in drm_gem_handle_create_tail()
Somnath Kotur (1):
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Stefan Metzmacher (1):
smb: server: make use of rdma_destroy_qp()
Thomas Fourier (1):
atm: idt77252: Add missing `dma_map_error()`
Tiwei Bie (1):
um: vector: Reduce stack usage in vector_eth_configure()
Uwe Kleine-König (1):
pwm: mediatek: Ensure to disable clocks in error path
Victor Nogueira (1):
net/sched: Abort __tc_modify_qdisc if parent class does not exist
Wang Jinchao (1):
md/raid1: Fix stack memory use after return in raid1_reshape
Xiaowei Li (1):
net: usb: qmi_wwan: add SIMCom 8230C composition
Yazen Ghannam (2):
x86/mce/amd: Fix threshold limit reset
x86/mce: Don't remove sysfs if thresholding sysfs init fails
Yue Haibing (1):
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
Zhang Heng (1):
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
Zheng Qixing (1):
nbd: fix uaf in nbd_genl_connect() error path
1 month, 2 weeks
- 1
- 1
Linux 5.10.240
by Greg Kroah-Hartman
I'm announcing the release of the 5.10.240 kernel.
All users of the 5.10 kernel series must upgrade.
The updated 5.10.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.10.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/ABI/testing/sysfs-devices-system-cpu | 2
Documentation/ABI/testing/sysfs-driver-ufs | 2
Documentation/admin-guide/hw-vuln/index.rst | 1
Documentation/admin-guide/hw-vuln/indirect-target-selection.rst | 156 +++++
Documentation/admin-guide/hw-vuln/processor_mmio_stale_data.rst | 4
Documentation/admin-guide/kernel-parameters.txt | 28
Documentation/devicetree/bindings/serial/8250.yaml | 2
Makefile | 2
arch/arm64/mm/mmu.c | 3
arch/powerpc/include/uapi/asm/ioctls.h | 8
arch/s390/Makefile | 2
arch/s390/purgatory/Makefile | 2
arch/um/drivers/ubd_user.c | 2
arch/um/drivers/vector_kern.c | 42 -
arch/um/include/asm/asm-prototypes.h | 5
arch/x86/Kconfig | 22
arch/x86/entry/entry.S | 8
arch/x86/include/asm/alternative.h | 26
arch/x86/include/asm/cpu.h | 13
arch/x86/include/asm/cpufeature.h | 5
arch/x86/include/asm/cpufeatures.h | 14
arch/x86/include/asm/disabled-features.h | 2
arch/x86/include/asm/irqflags.h | 4
arch/x86/include/asm/msr-index.h | 13
arch/x86/include/asm/mwait.h | 19
arch/x86/include/asm/nospec-branch.h | 50 +
arch/x86/include/asm/required-features.h | 2
arch/x86/include/asm/text-patching.h | 31 +
arch/x86/kernel/alternative.c | 308 +++++++++-
arch/x86/kernel/cpu/amd.c | 58 +
arch/x86/kernel/cpu/bugs.c | 272 ++++++++
arch/x86/kernel/cpu/common.c | 77 ++
arch/x86/kernel/cpu/mce/amd.c | 15
arch/x86/kernel/cpu/mce/core.c | 8
arch/x86/kernel/cpu/mce/intel.c | 1
arch/x86/kernel/cpu/scattered.c | 1
arch/x86/kernel/ftrace.c | 4
arch/x86/kernel/kprobes/core.c | 39 -
arch/x86/kernel/module.c | 14
arch/x86/kernel/process.c | 15
arch/x86/kernel/static_call.c | 2
arch/x86/kernel/vmlinux.lds.S | 8
arch/x86/kvm/cpuid.c | 31 -
arch/x86/kvm/cpuid.h | 1
arch/x86/kvm/svm/vmenter.S | 3
arch/x86/kvm/vmx/vmx.c | 2
arch/x86/kvm/x86.c | 4
arch/x86/lib/retpoline.S | 39 +
arch/x86/net/bpf_jit_comp.c | 8
arch/x86/um/asm/checksum.h | 3
drivers/acpi/acpi_pad.c | 7
drivers/acpi/acpica/dsmethod.c | 7
drivers/acpi/battery.c | 19
drivers/ata/pata_cs5536.c | 2
drivers/atm/idt77252.c | 5
drivers/base/cpu.c | 15
drivers/dma-buf/dma-resv.c | 2
drivers/dma/xilinx/xilinx_dma.c | 2
drivers/gpu/drm/amd/amdkfd/kfd_packet_manager_v9.c | 2
drivers/gpu/drm/bridge/cdns-dsi.c | 27
drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4
drivers/gpu/drm/exynos/exynos_drm_fimd.c | 12
drivers/gpu/drm/i915/gt/intel_ring_submission.c | 3
drivers/gpu/drm/i915/selftests/i915_request.c | 20
drivers/gpu/drm/i915/selftests/mock_request.c | 2
drivers/gpu/drm/tegra/dc.c | 17
drivers/gpu/drm/tegra/hub.c | 4
drivers/gpu/drm/tegra/hub.h | 3
drivers/gpu/drm/udl/udl_drv.c | 2
drivers/gpu/drm/v3d/v3d_drv.h | 7
drivers/gpu/drm/v3d/v3d_gem.c | 2
drivers/gpu/drm/v3d/v3d_irq.c | 38 -
drivers/hid/hid-ids.h | 5
drivers/hid/hid-quirks.c | 3
drivers/hid/wacom_sys.c | 6
drivers/hv/channel_mgmt.c | 117 ++-
drivers/hv/hyperv_vmbus.h | 19
drivers/hv/vmbus_drv.c | 2
drivers/hwmon/pmbus/max34440.c | 48 +
drivers/i2c/busses/i2c-robotfuzz-osif.c | 6
drivers/i2c/busses/i2c-tiny-usb.c | 6
drivers/iio/pressure/zpa2326.c | 2
drivers/infiniband/core/iwcm.c | 38 -
drivers/infiniband/core/iwcm.h | 2
drivers/infiniband/hw/mlx5/counters.c | 2
drivers/infiniband/hw/mlx5/devx.c | 2
drivers/infiniband/hw/mlx5/main.c | 33 +
drivers/input/joystick/xpad.c | 5
drivers/input/keyboard/atkbd.c | 3
drivers/leds/led-class-multicolor.c | 3
drivers/mailbox/mailbox.c | 2
drivers/md/bcache/super.c | 7
drivers/md/dm-raid.c | 2
drivers/md/md-bitmap.c | 2
drivers/md/raid1.c | 1
drivers/media/platform/omap3isp/ispccdc.c | 8
drivers/media/platform/omap3isp/ispstat.c | 6
drivers/media/usb/uvc/uvc_ctrl.c | 61 +
drivers/mfd/max14577.c | 1
drivers/misc/vmw_vmci/vmci_host.c | 9
drivers/mmc/host/mtk-sd.c | 39 -
drivers/mmc/host/sdhci.c | 9
drivers/mmc/host/sdhci.h | 16
drivers/net/can/m_can/m_can.c | 2
drivers/net/can/m_can/tcan4x5x.c | 9
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 2
drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 9
drivers/net/ethernet/amd/xgbe/xgbe.h | 4
drivers/net/ethernet/atheros/atlx/atl1.c | 78 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2
drivers/net/ethernet/cisco/enic/enic_main.c | 4
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 141 +++-
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.h | 20
drivers/net/ethernet/freescale/dpaa2/dpaa2-ethtool.c | 18
drivers/net/ethernet/freescale/dpaa2/dpni-cmd.h | 6
drivers/net/ethernet/freescale/dpaa2/dpni.c | 2
drivers/net/ethernet/freescale/dpaa2/dpni.h | 6
drivers/net/ethernet/freescale/enetc/enetc_hw.h | 2
drivers/net/ethernet/sun/niu.c | 31 -
drivers/net/ethernet/sun/niu.h | 4
drivers/net/ethernet/xilinx/ll_temac_main.c | 2
drivers/net/phy/microchip.c | 2
drivers/net/phy/smsc.c | 28
drivers/net/usb/qmi_wwan.c | 1
drivers/net/wireless/ath/ath6kl/bmi.c | 4
drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6
drivers/pci/controller/cadence/pcie-cadence-ep.c | 5
drivers/pci/controller/pci-hyperv.c | 17
drivers/pinctrl/qcom/pinctrl-msm.c | 20
drivers/platform/mellanox/mlxbf-tmfifo.c | 3
drivers/pwm/pwm-mediatek.c | 15
drivers/regulator/gpio-regulator.c | 4
drivers/rtc/lib_test.c | 2
drivers/rtc/rtc-cmos.c | 10
drivers/scsi/qla2xxx/qla_mbx.c | 2
drivers/scsi/qla4xxx/ql4_os.c | 2
drivers/scsi/ufs/ufs-sysfs.c | 4
drivers/spi/spi-fsl-dspi.c | 11
drivers/staging/rtl8723bs/core/rtw_security.c | 46 -
drivers/target/target_core_pr.c | 4
drivers/tty/vt/vt.c | 1
drivers/uio/uio_hv_generic.c | 18
drivers/usb/class/cdc-wdm.c | 23
drivers/usb/common/usb-conn-gpio.c | 25
drivers/usb/core/quirks.c | 3
drivers/usb/core/usb.c | 14
drivers/usb/gadget/function/f_tcm.c | 4
drivers/usb/gadget/function/u_serial.c | 6
drivers/usb/host/xhci-dbgcap.c | 4
drivers/usb/host/xhci-dbgtty.c | 1
drivers/usb/typec/altmodes/displayport.c | 5
drivers/usb/typec/tcpm/tcpci_maxim.c | 20
drivers/vhost/scsi.c | 7
fs/btrfs/inode.c | 36 -
fs/btrfs/tree-log.c | 4
fs/btrfs/volumes.c | 6
fs/ceph/file.c | 2
fs/cifs/misc.c | 8
fs/f2fs/super.c | 30
fs/jfs/jfs_dmap.c | 41 -
fs/namespace.c | 8
fs/nfs/flexfilelayout/flexfilelayout.c | 121 ++-
fs/nfs/inode.c | 17
fs/nfs/nfs4proc.c | 12
fs/nfs/pnfs.c | 4
fs/overlayfs/util.c | 4
fs/proc/array.c | 6
fs/proc/inode.c | 2
fs/proc/proc_sysctl.c | 18
include/drm/spsc_queue.h | 4
include/linux/cpu.h | 3
include/linux/hyperv.h | 2
include/linux/ipv6.h | 1
include/linux/module.h | 5
include/linux/usb/typec_dp.h | 1
include/uapi/linux/vm_sockets.h | 30
kernel/events/core.c | 2
kernel/rcu/tree.c | 4
kernel/rseq.c | 60 +
lib/test_objagg.c | 4
net/appletalk/ddp.c | 1
net/atm/clip.c | 75 +-
net/atm/resources.c | 3
net/bluetooth/l2cap_core.c | 9
net/ipv6/ip6_output.c | 9
net/mac80211/rx.c | 4
net/mac80211/util.c | 2
net/netlink/af_netlink.c | 82 +-
net/rose/rose_route.c | 15
net/rxrpc/call_accept.c | 3
net/sched/sch_api.c | 42 -
net/sched/sch_sfq.c | 10
net/tipc/topsrv.c | 2
net/vmw_vsock/af_vsock.c | 78 ++
net/vmw_vsock/vmci_transport.c | 4
sound/isa/sb/sb16_main.c | 4
sound/pci/hda/hda_bind.c | 2
sound/pci/hda/hda_intel.c | 3
sound/soc/fsl/fsl_asrc.c | 3
sound/usb/stream.c | 2
tools/lib/bpf/btf_dump.c | 3
202 files changed, 2709 insertions(+), 793 deletions(-)
Al Viro (2):
attach_recursive_mnt(): do not lock the covering tree when sliding something under it
fix proc_sys_compare() handling of in-lookup dentries
Alexandre Belloni (1):
rtc: lib_test: add MODULE_LICENSE
Alexandru Ardelean (1):
uio: uio_hv_generic: use devm_kzalloc() for private data alloc
Alexis Czezar Torreno (1):
hwmon: (pmbus/max34440) Fix support for max34451
Alok Tiwari (2):
enic: fix incorrect MTU comparison in enic_change_mtu()
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
Amit Sunil Dhamne (1):
usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
Andra Paraschiv (4):
vm_sockets: Add flags field in the vsock address data structure
vm_sockets: Add VMADDR_FLAG_TO_HOST vsock flag
af_vsock: Set VMADDR_FLAG_TO_HOST flag on the receive path
af_vsock: Assign the vsock transport considering the vsock address flags
Andrei Kuchynski (1):
usb: typec: displayport: Fix potential deadlock
Andy Shevchenko (1):
usb: Add checks for snprintf() calls in usb_alloc_dev()
Aradhya Bhatia (4):
drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
drm/bridge: cdns-dsi: Fix connecting to next bridge
drm/bridge: cdns-dsi: Check return value when getting default PHY config
drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
Badhri Jagan Sridharan (1):
usb: typec: tcpci_maxim: Fix uninitialized return variable
Bart Van Assche (1):
scsi: ufs: core: Fix spelling of a sysfs attribute name
Bartosz Golaszewski (1):
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
Benjamin Coddington (1):
NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
Borislav Petkov (5):
x86/bugs: Rename MDS machinery to something more generic
x86/bugs: Add a Transient Scheduler Attacks mitigation
KVM: x86: add support for CPUID leaf 0x80000021
KVM: SVM: Advertise TSA CPUID bits to guests
x86/process: Move the buffer clearing before MONITOR
Borislav Petkov (AMD) (1):
x86/alternative: Optimize returns patching
Brett A C Sheffield (Librecast) (1):
Revert "ipv6: save dontfrag in cork"
Brett Werling (1):
can: tcan4x5x: fix power regulator retrieval during probe
Cezary Rojewski (1):
ALSA: hda: Ignore unsol events for cards being shut down
Chance Yang (1):
usb: common: usb-conn-gpio: use a unique name for usb connector device
Chao Yu (1):
f2fs: don't over-report free space or inodes in statvfs
Chen Yufeng (1):
usb: potential integer overflow in usbg_make_tpg()
Chia-Lin Kao (AceLan) (1):
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Christian König (1):
dma-buf: fix timeout handling in dma_resv_wait_timeout v2
Dan Carpenter (2):
drm/i915/selftests: Change mock_request() to return error pointers
lib: test_objagg: Set error message in check_expect_hints_stats()
Daniel Sneddon (1):
x86/bhi: Define SPEC_CTRL_BHI_DIS_S
Daniil Dulov (1):
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
Dave Kleikamp (1):
fs/jfs: consolidate sanity checking in dbMount
David Howells (1):
rxrpc: Fix oops due to non-existence of prealloc backlog struct
David Thompson (1):
platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
Dev Jain (1):
arm64: Restrict pagetable teardown to avoid false warning
Dexuan Cui (1):
PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time
Dmitry Kandybka (1):
ceph: fix possible integer overflow in ceph_zero_objects()
Dongli Zhang (1):
vhost-scsi: protect vq->log_used with vq->mutex
Eric Biggers (1):
x86/its: Fix build errors when CONFIG_MODULES=n
Eric Dumazet (2):
net_sched: sch_sfq: reject invalid perturb period
atm: clip: prevent NULL deref in clip_push()
Filipe Manana (3):
btrfs: fix missing error handling when searching for inode refs during log replay
btrfs: propagate last_unlink_trans earlier when doing a rmdir
btrfs: use btrfs_record_snapshot_destroy() during rmdir
Frédéric Danis (1):
Bluetooth: L2CAP: Fix L2CAP MTU negotiation
Fushuai Wang (1):
dpaa2-eth: fix xdp_rxq_info leak
George Kennedy (1):
VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF
Greg Kroah-Hartman (1):
Linux 5.10.240
Gustavo A. R. Silva (1):
net: rose: Fix fall-through warnings for Clang
Haiyang Zhang (1):
Drivers: hv: vmbus: Fix duplicate CPU assignments within a device
Hans de Goede (1):
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
HarshaVardhana S A (1):
vsock/vmci: Clear the vmci transport packet properly when initializing it
Heinz Mauelshagen (1):
dm-raid: fix variable in journal device check
Ioana Ciornei (2):
dpaa2-eth: rename dpaa2_eth_xdp_release_buf into dpaa2_eth_recycle_buf
net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats
JP Kobryn (1):
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
Jakub Kicinski (1):
netlink: make sure we allow at least one dump skb
James Clark (1):
spi: spi-fsl-dspi: Clear completion counter before initiating transfer
Jann Horn (1):
x86/mm: Disable hugetlb page table sharing on 32-bit
Janusz Krzysztofik (1):
drm/i915/gt: Fix timeline left held on VMA alloc error
Jay Cornwall (1):
drm/amdkfd: Fix race in GWS queue scheduling
Johannes Berg (3):
ata: pata_cs5536: fix build on 32-bit UML
wifi: mac80211: drop invalid source address OCB frames
wifi: ath6kl: remove WARN on bad firmware input
Jonathan Cameron (1):
iio: pressure: zpa2326: Use aligned_s64 for the timestamp
Jos Wang (1):
usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
Josh Poimboeuf (1):
x86/alternatives: Remove faulty optimization
Junlin Yang (2):
usb: typec: tcpci_maxim: remove redundant assignment
usb: typec: tcpci_maxim: add terminating newlines to logging
Kaustabh Chakraborty (1):
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
Kees Cook (1):
ovl: Check for NULL d_inode() in ovl_dentry_upper()
Kito Xu (1):
net: appletalk: Fix device refcount leak in atrtr_create()
Kohei Enju (1):
rose: fix dangling neighbour pointers in rose_rt_device_down()
Krzysztof Kozlowski (1):
mfd: max14577: Fix wakeup source leaks on device unbind
Kuen-Han Tsai (1):
usb: gadget: u_serial: Fix race condition in TTY wakeup
Kuniyuki Iwashima (8):
atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
netlink: Fix wraparounds of sk->sk_rmem_alloc.
tipc: Fix use-after-free in tipc_conn_close().
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
atm: clip: Fix memory leak of struct clip_vcc.
atm: clip: Fix infinite recursive call of clip_push().
netlink: Fix rmem check in netlink_broadcast_deliver().
Lachlan Hodges (1):
wifi: mac80211: fix beacon interval calculation overflow
Linggang Zeng (1):
bcache: fix NULL pointer in cache_set_flush()
Lion Ackermann (1):
net/sched: Always pass notifications when child class becomes empty
Long Li (1):
uio_hv_generic: Align ring size to system page
Madhavan Srinivasan (1):
powerpc: Fix struct termio related ioctl macros
Manivannan Sadhasivam (1):
regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
Marek Szyprowski (2):
media: omap3isp: use sgtable-based scatterlist wrappers
drm/exynos: fimd: Guard display clock control with runtime PM calls
Mark Harmstone (1):
btrfs: update superblock's device bytes_used when dropping chunk
Mark Zhang (1):
RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
Masami Hiramatsu (Google) (2):
mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
mtk-sd: Prevent memory corruption from DMA map failure
Mateusz Jończyk (1):
rtc: cmos: use spin_lock_irqsave in cmos_interrupt
Mathias Nyman (1):
xhci: dbc: Flush queued requests before stopping dbc
Matt Reynolds (1):
Input: xpad - add support for Amazon Game Controller
Matthew Brost (1):
drm/sched: Increment job count before swapping tail spsc queue
Maurizio Lombardi (1):
scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
Maíra Canal (1):
drm/v3d: Disable interrupts before resetting the GPU
Michael Jeanson (1):
rseq: Fix segfault on registration when rseq_cs is non-zero
Michal Luczaj (3):
vsock: Fix transport_{g2h,h2g} TOCTOU
vsock: Fix transport_* TOCTOU
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
Nathan Chancellor (2):
s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
Nicolas Pitre (1):
vt: add missing notification when switching back to text mode
Niklas Cassel (1):
PCI: cadence-ep: Correct PBA offset in .set_msix() callback
Nilton Perim Neto (1):
Input: xpad - support Acer NGR 200 Controller
Oleg Nesterov (1):
fs/proc: do_task_stat: use __for_each_thread()
Oleksij Rempel (3):
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
Olga Kornievskaia (1):
NFSv4.2: fix listxattr to return selinux security label
Oliver Neukum (1):
Logitech C-270 even more broken
Pali Rohár (1):
cifs: Fix cifs_query_path_info() for Windows NT servers
Patrisious Haddad (2):
RDMA/mlx5: Fix CC counters query for MPV
RDMA/mlx5: Fix vport loopback for MPV device
Pawan Gupta (7):
Documentation: x86/bugs/its: Add ITS documentation
x86/its: Enumerate Indirect Target Selection (ITS) bug
x86/its: Add support for ITS-safe indirect thunk
x86/its: Add support for ITS-safe return thunk
x86/its: Fix undefined reference to cpu_wants_rethunk_at()
x86/its: Enable Indirect Target Selection mitigation
x86/its: Add "vmexit" option to skip mitigation on some CPUs
Peng Fan (1):
mailbox: Not protect module_put with spin_lock_irqsave
Peter Zijlstra (5):
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
x86/alternatives: Introduce int3_emulate_jcc()
x86/alternatives: Teach text_poke_bp() to patch Jcc.d32 instructions
x86/its: Use dynamic thunks for indirect branches
x86/its: FineIBT-paranoid vs ITS
Qasim Ijaz (3):
HID: wacom: fix memory leak on kobject creation failure
HID: wacom: fix memory leak on sysfs attribute creation failure
HID: wacom: fix kobject reference count leak
Qiu-ji Chen (1):
drm/tegra: Fix a possible null pointer dereference
RD Babiera (1):
usb: typec: altmodes/displayport: do not index invalid pin_assignments
Radu Bulie (2):
dpaa2-eth: Update dpni_get_single_step_cfg command
dpaa2-eth: Update SINGLE_STEP register access
Rafael J. Wysocki (2):
ACPICA: Refuse to evaluate a method if arguments are missing
Revert "ACPI: battery: negate current when discharging"
Raju Rangoju (1):
amd-xgbe: align CL37 AN sequence as per databook
Ricardo Ribalda (3):
media: uvcvideo: Return the number of processed controls
media: uvcvideo: Send control events for partial succeeds
media: uvcvideo: Rollback non processed entities on error
Robert Hodaszi (1):
usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
Sami Tolvanen (1):
um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
Saurabh Sengar (2):
Drivers: hv: vmbus: Add utility function for querying ring size
uio_hv_generic: Query the ringbuffer size for device
Sean Nyekjaer (1):
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
Seiji Nishikawa (1):
ACPI: PAD: fix crash in exit_round_robin()
Sergey Senozhatsky (1):
mtk-sd: reset host->mrq on prepare_data() error
Shengjiu Wang (1):
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
Shin'ichiro Kawasaki (1):
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
Shravya KN (1):
bnxt_en: Fix DCB ETS validation
Simon Horman (1):
net: enetc: Correct endianness handling in _enetc_rd_reg64
Somnath Kotur (1):
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Stefano Garzarella (1):
vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
Sven Schwermer (1):
leds: multicolor: Fix intensity setting while SW blinking
Takashi Iwai (1):
ALSA: sb: Force to disable DMAs once when DMA mode is changed
Thierry Reding (1):
drm/tegra: Assign plane type before registration
Thomas Fourier (5):
scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
nui: Fix dma_mapping_error() check
ethernet: atl1: Add missing DMA mapping error checks and count errors
atm: idt77252: Add missing `dma_map_error()`
Thomas Gessler (1):
dmaengine: xilinx_dma: Set dma_device directions
Thomas Gleixner (1):
x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc()
Thomas Zimmermann (1):
drm/udl: Unregister device before cleaning up on disconnect
Tigran Mkrtchyan (1):
flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes
Tiwei Bie (2):
um: ubd: Add missing error check in start_io_thread()
um: vector: Reduce stack usage in vector_eth_configure()
Trond Myklebust (1):
NFSv4/flexfiles: Fix handling of NFS level errors in I/O
Uladzislau Rezki (Sony) (1):
rcu: Return early if callback is not specified
Ulf Hansson (1):
Revert "mmc: sdhci: Disable SD card clock before changing parameters"
Uwe Kleine-König (1):
pwm: mediatek: Ensure to disable clocks in error path
Vasiliy Kovalev (1):
jfs: validate AG parameters in dbMount() to prevent crashes
Vicki Pfau (1):
Input: xpad - add VID for Turtle Beach controllers
Victor Nogueira (1):
net/sched: Abort __tc_modify_qdisc if parent class does not exist
Victor Shih (1):
mmc: sdhci: Add a helper function for dump register in dynamic debug mode
Vijendar Mukunda (1):
ALSA: hda: Add new pci id for AMD GPU display HD audio controller
Vitaly Kuznetsov (1):
Drivers: hv: Rename 'alloced' to 'allocated'
Wang Jinchao (1):
md/raid1: Fix stack memory use after return in raid1_reshape
Weihang Li (1):
RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
Wolfram Sang (2):
i2c: tiny-usb: disable zero-length read messages
i2c: robotfuzz-osif: disable zero-length read messages
Wupeng Ma (1):
VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
Xiaowei Li (1):
net: usb: qmi_wwan: add SIMCom 8230C composition
Yao Zi (1):
dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
Yazen Ghannam (2):
x86/mce/amd: Fix threshold limit reset
x86/mce: Don't remove sysfs if thresholding sysfs init fails
Youngjun Lee (1):
ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
Yu Kuai (1):
md/md-bitmap: fix dm-raid max_write_behind setting
Yuan Chen (1):
libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
Yue Haibing (1):
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
Yue Hu (1):
mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data()
Zhang Heng (1):
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
Łukasz Bartosik (1):
xhci: dbctty: disable ECHO flag by default
1 month, 2 weeks
- 1
- 1
Linux 5.4.296
by Greg Kroah-Hartman
I'm announcing the release of the 5.4.296 kernel.
All users of the 5.4 kernel series must upgrade.
The updated 5.4.y git tree can be found at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-5.4.y
and can be browsed at the normal kernel.org git web browser:
https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary
thanks,
greg k-h
------------
Documentation/ABI/testing/sysfs-driver-ufs | 2
Makefile | 2
arch/arm64/mm/mmu.c | 3
arch/powerpc/include/uapi/asm/ioctls.h | 8
arch/s390/Makefile | 2
arch/s390/purgatory/Makefile | 2
arch/um/drivers/ubd_user.c | 2
arch/x86/Kconfig | 2
arch/x86/kernel/cpu/mce/amd.c | 15 -
arch/x86/kernel/cpu/mce/core.c | 8
arch/x86/kernel/cpu/mce/intel.c | 1
drivers/acpi/acpi_pad.c | 7
drivers/acpi/acpica/dsmethod.c | 7
drivers/acpi/battery.c | 19 -
drivers/ata/pata_cs5536.c | 2
drivers/atm/idt77252.c | 5
drivers/dma-buf/dma-resv.c | 5
drivers/dma/xilinx/xilinx_dma.c | 2
drivers/gpu/drm/bridge/cdns-dsi.c | 11
drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4
drivers/gpu/drm/exynos/exynos_drm_fimd.c | 12
drivers/gpu/drm/i915/gt/intel_ringbuffer.c | 3
drivers/gpu/drm/i915/selftests/i915_request.c | 20 -
drivers/gpu/drm/i915/selftests/mock_request.c | 2
drivers/gpu/drm/tegra/dc.c | 12
drivers/gpu/drm/tegra/hub.c | 4
drivers/gpu/drm/tegra/hub.h | 3
drivers/gpu/drm/v3d/v3d_drv.h | 9
drivers/gpu/drm/v3d/v3d_gem.c | 2
drivers/gpu/drm/v3d/v3d_irq.c | 36 +-
drivers/hid/hid-ids.h | 5
drivers/hid/hid-quirks.c | 3
drivers/hid/wacom_sys.c | 6
drivers/i2c/busses/i2c-robotfuzz-osif.c | 6
drivers/i2c/busses/i2c-tiny-usb.c | 6
drivers/iio/pressure/zpa2326.c | 2
drivers/infiniband/core/device.c | 1
drivers/infiniband/core/iwcm.c | 38 +-
drivers/infiniband/core/iwcm.h | 2
drivers/infiniband/core/uverbs_std_types_counters.c | 17 -
drivers/infiniband/hw/mlx5/devx.c | 2
drivers/infiniband/hw/mlx5/main.c | 55 ++-
drivers/input/joystick/xpad.c | 5
drivers/input/keyboard/atkbd.c | 3
drivers/mailbox/mailbox.c | 2
drivers/md/dm-raid.c | 2
drivers/md/md-bitmap.c | 2
drivers/md/raid1.c | 1
drivers/media/platform/omap3isp/ispccdc.c | 8
drivers/media/platform/omap3isp/ispstat.c | 6
drivers/media/platform/vivid/vivid-vid-cap.c | 2
drivers/media/usb/dvb-usb/cxusb.c | 36 +-
drivers/media/usb/uvc/uvc_ctrl.c | 61 +++-
drivers/mfd/max14577.c | 1
drivers/misc/vmw_vmci/vmci_host.c | 9
drivers/mmc/host/mtk-sd.c | 39 +-
drivers/mmc/host/sdhci.c | 9
drivers/mmc/host/sdhci.h | 16 +
drivers/net/can/m_can/m_can.c | 2
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 2
drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 9
drivers/net/ethernet/amd/xgbe/xgbe.h | 4
drivers/net/ethernet/atheros/atlx/atl1.c | 78 +++--
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2
drivers/net/ethernet/cisco/enic/enic_main.c | 4
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 26 +
drivers/net/ethernet/freescale/enetc/enetc_hw.h | 2
drivers/net/ethernet/sun/niu.c | 31 ++
drivers/net/ethernet/sun/niu.h | 4
drivers/net/phy/microchip.c | 2
drivers/net/usb/qmi_wwan.c | 1
drivers/net/wireless/ath/ath6kl/bmi.c | 4
drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6
drivers/pinctrl/qcom/pinctrl-msm.c | 20 +
drivers/platform/mellanox/mlxbf-tmfifo.c | 3
drivers/pwm/pwm-mediatek.c | 15 -
drivers/regulator/gpio-regulator.c | 19 +
drivers/scsi/qla4xxx/ql4_os.c | 2
drivers/scsi/ufs/ufs-sysfs.c | 4
drivers/spi/spi-fsl-dspi.c | 55 ++-
drivers/staging/rtl8723bs/core/rtw_security.c | 46 ---
drivers/tty/serial/uartlite.c | 15 -
drivers/tty/vt/vt.c | 1
drivers/usb/class/cdc-wdm.c | 23 -
drivers/usb/core/quirks.c | 3
drivers/usb/core/usb.c | 14
drivers/usb/gadget/function/f_tcm.c | 4
drivers/usb/gadget/function/u_serial.c | 6
drivers/usb/typec/altmodes/displayport.c | 5
fs/btrfs/inode.c | 36 +-
fs/btrfs/ioctl.c | 3
fs/btrfs/tree-log.c | 4
fs/ceph/file.c | 2
fs/cifs/misc.c | 8
fs/jfs/jfs_dmap.c | 41 --
fs/namespace.c | 8
fs/nfs/flexfilelayout/flexfilelayout.c | 144 +++++++--
fs/nfs/inode.c | 17 -
fs/overlayfs/util.c | 4
fs/proc/inode.c | 16 -
fs/proc/proc_sysctl.c | 18 -
include/drm/spsc_queue.h | 4
include/linux/of.h | 291 +++++++++-----------
include/linux/regulator/gpio-regulator.h | 2
include/linux/usb/typec_dp.h | 1
include/rdma/ib_verbs.h | 7
include/uapi/linux/vm_sockets.h | 4
init/Kconfig | 4
lib/test_objagg.c | 4
net/appletalk/ddp.c | 1
net/atm/clip.c | 64 +++-
net/atm/resources.c | 3
net/bluetooth/l2cap_core.c | 9
net/bpfilter/Makefile | 5
net/ipv6/route.c | 3
net/mac80211/rx.c | 4
net/mac80211/util.c | 2
net/netlink/af_netlink.c | 82 +++--
net/rose/rose_route.c | 15 -
net/rxrpc/call_accept.c | 3
net/sched/sch_api.c | 42 +-
net/tipc/topsrv.c | 2
net/vmw_vsock/vmci_transport.c | 4
scripts/Kbuild.include | 2
scripts/Makefile.host | 4
scripts/Makefile.lib | 8
sound/isa/sb/sb16_main.c | 4
sound/pci/hda/hda_bind.c | 2
sound/soc/meson/meson-card-utils.c | 2
sound/usb/stream.c | 2
usr/include/Makefile | 6
132 files changed, 1178 insertions(+), 680 deletions(-)
Al Viro (2):
attach_recursive_mnt(): do not lock the covering tree when sliding something under it
fix proc_sys_compare() handling of in-lookup dentries
Alok Tiwari (1):
enic: fix incorrect MTU comparison in enic_change_mtu()
Andrei Kuchynski (1):
usb: typec: displayport: Fix potential deadlock
Andy Shevchenko (1):
usb: Add checks for snprintf() calls in usb_alloc_dev()
Aradhya Bhatia (3):
drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
drm/bridge: cdns-dsi: Fix connecting to next bridge
drm/bridge: cdns-dsi: Check return value when getting default PHY config
Arnd Bergmann (1):
kbuild: hdrcheck: fix cross build with clang
Bart Van Assche (1):
scsi: ufs: core: Fix spelling of a sysfs attribute name
Bartosz Golaszewski (1):
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
Cezary Rojewski (1):
ALSA: hda: Ignore unsol events for cards being shut down
Chen Yufeng (1):
usb: potential integer overflow in usbg_make_tpg()
Chia-Lin Kao (AceLan) (1):
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Christian König (1):
dma-buf: fix timeout handling in dma_resv_wait_timeout v2
Dan Carpenter (2):
lib: test_objagg: Set error message in check_expect_hints_stats()
drm/i915/selftests: Change mock_request() to return error pointers
Daniil Dulov (1):
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
Dave Kleikamp (1):
fs/jfs: consolidate sanity checking in dbMount
David Howells (1):
rxrpc: Fix oops due to non-existence of prealloc backlog struct
David Thompson (1):
platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
Denis Arefev (1):
media: vivid: Change the siize of the composing
Dev Jain (1):
arm64: Restrict pagetable teardown to avoid false warning
Dmitry Kandybka (1):
ceph: fix possible integer overflow in ceph_zero_objects()
Edward Adam Davis (1):
media: cxusb: no longer judge rbuf when the write fails
Eric W. Biederman (1):
proc: Clear the pieces of proc_inode that proc_evict_inode cares about
Filipe Manana (3):
btrfs: fix missing error handling when searching for inode refs during log replay
btrfs: propagate last_unlink_trans earlier when doing a rmdir
btrfs: use btrfs_record_snapshot_destroy() during rmdir
Frédéric Danis (1):
Bluetooth: L2CAP: Fix L2CAP MTU negotiation
Fushuai Wang (1):
dpaa2-eth: fix xdp_rxq_info leak
Georg Kohmann (1):
net: ipv6: Discard next-hop MTU less than minimum link MTU
George Kennedy (1):
VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF
Greg Kroah-Hartman (1):
Linux 5.4.296
Gustavo A. R. Silva (1):
net: rose: Fix fall-through warnings for Clang
Hans de Goede (1):
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
HarshaVardhana S A (1):
vsock/vmci: Clear the vmci transport packet properly when initializing it
Heinz Mauelshagen (1):
dm-raid: fix variable in journal device check
JP Kobryn (1):
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
Jakub Kicinski (1):
netlink: make sure we allow at least one dump skb
Jakub Lewalski (1):
tty: serial: uartlite: register uart driver in init
James Clark (1):
spi: spi-fsl-dspi: Clear completion counter before initiating transfer
Jann Horn (1):
x86/mm: Disable hugetlb page table sharing on 32-bit
Janusz Krzysztofik (1):
drm/i915/gt: Fix timeline left held on VMA alloc error
Jerome Neanne (1):
regulator: gpio: Add input_supply support in gpio_regulator_config
Johannes Berg (3):
ata: pata_cs5536: fix build on 32-bit UML
wifi: mac80211: drop invalid source address OCB frames
wifi: ath6kl: remove WARN on bad firmware input
Jonathan Cameron (1):
iio: pressure: zpa2326: Use aligned_s64 for the timestamp
Jos Wang (1):
usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
Kaustabh Chakraborty (1):
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
Kees Cook (1):
ovl: Check for NULL d_inode() in ovl_dentry_upper()
Kito Xu (1):
net: appletalk: Fix device refcount leak in atrtr_create()
Kohei Enju (1):
rose: fix dangling neighbour pointers in rose_rt_device_down()
Krzysztof Kozlowski (1):
mfd: max14577: Fix wakeup source leaks on device unbind
Kuen-Han Tsai (1):
usb: gadget: u_serial: Fix race condition in TTY wakeup
Kuniyuki Iwashima (8):
atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
netlink: Fix wraparounds of sk->sk_rmem_alloc.
tipc: Fix use-after-free in tipc_conn_close().
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
atm: clip: Fix memory leak of struct clip_vcc.
atm: clip: Fix infinite recursive call of clip_push().
netlink: Fix rmem check in netlink_broadcast_deliver().
Lachlan Hodges (1):
wifi: mac80211: fix beacon interval calculation overflow
Leon Romanovsky (1):
RDMA/core: Create and destroy counters in the ib_core
Lion Ackermann (1):
net/sched: Always pass notifications when child class becomes empty
Madhavan Srinivasan (1):
powerpc: Fix struct termio related ioctl macros
Manivannan Sadhasivam (1):
regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
Marek Szyprowski (2):
media: omap3isp: use sgtable-based scatterlist wrappers
drm/exynos: fimd: Guard display clock control with runtime PM calls
Mark Zhang (1):
RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
Martin Blumenstingl (1):
ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
Masahiro Yamada (3):
kbuild: use -MMD instead of -MD to exclude system headers from dependency
bpfilter: match bit size of bpfilter_umh to that of the kernel
kbuild: add --target to correctly cross-compile UAPI headers with Clang
Masami Hiramatsu (Google) (2):
mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
mtk-sd: Prevent memory corruption from DMA map failure
Matt Reynolds (1):
Input: xpad - add support for Amazon Game Controller
Matthew Brost (1):
drm/sched: Increment job count before swapping tail spsc queue
Maíra Canal (1):
drm/v3d: Disable interrupts before resetting the GPU
Michael Walle (1):
of: property: define of_property_read_u{8,16,32,64}_array() unconditionally
Nathan Chancellor (2):
s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
Nicolas Pitre (1):
vt: add missing notification when switching back to text mode
Nilton Perim Neto (1):
Input: xpad - support Acer NGR 200 Controller
Oleksij Rempel (1):
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
Oliver Neukum (1):
Logitech C-270 even more broken
Omar Sandoval (1):
btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
Pali Rohár (1):
cifs: Fix cifs_query_path_info() for Windows NT servers
Patrisious Haddad (2):
RDMA/mlx5: Fix CC counters query for MPV
RDMA/mlx5: Fix vport loopback for MPV device
Peng Fan (1):
mailbox: Not protect module_put with spin_lock_irqsave
Qasim Ijaz (3):
HID: wacom: fix memory leak on kobject creation failure
HID: wacom: fix memory leak on sysfs attribute creation failure
HID: wacom: fix kobject reference count leak
RD Babiera (1):
usb: typec: altmodes/displayport: do not index invalid pin_assignments
Rafael J. Wysocki (2):
ACPICA: Refuse to evaluate a method if arguments are missing
Revert "ACPI: battery: negate current when discharging"
Raju Rangoju (1):
amd-xgbe: align CL37 AN sequence as per databook
Ricardo Ribalda (3):
media: uvcvideo: Return the number of processed controls
media: uvcvideo: Send control events for partial succeeds
media: uvcvideo: Rollback non processed entities on error
Rob Herring (1):
of: Add of_property_present() helper
Robert Hodaszi (1):
usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
Sean Nyekjaer (1):
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
Sean Young (1):
media: cxusb: use dev_dbg() rather than hand-rolled debug
Seiji Nishikawa (1):
ACPI: PAD: fix crash in exit_round_robin()
Sergey Senozhatsky (1):
mtk-sd: reset host->mrq on prepare_data() error
Shin'ichiro Kawasaki (1):
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
Shravya KN (1):
bnxt_en: Fix DCB ETS validation
Simon Horman (1):
net: enetc: Correct endianness handling in _enetc_rd_reg64
Somnath Kotur (1):
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Stefano Garzarella (1):
vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
Takashi Iwai (1):
ALSA: sb: Force to disable DMAs once when DMA mode is changed
Thierry Reding (1):
drm/tegra: Assign plane type before registration
Thomas Fourier (4):
scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
nui: Fix dma_mapping_error() check
ethernet: atl1: Add missing DMA mapping error checks and count errors
atm: idt77252: Add missing `dma_map_error()`
Thomas Gessler (1):
dmaengine: xilinx_dma: Set dma_device directions
Tigran Mkrtchyan (1):
flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes
Tiwei Bie (1):
um: ubd: Add missing error check in start_io_thread()
Trond Myklebust (1):
NFSv4/flexfiles: Fix handling of NFS level errors in I/O
Ulf Hansson (1):
Revert "mmc: sdhci: Disable SD card clock before changing parameters"
Uwe Kleine-König (1):
pwm: mediatek: Ensure to disable clocks in error path
Vasiliy Kovalev (1):
jfs: validate AG parameters in dbMount() to prevent crashes
Vicki Pfau (1):
Input: xpad - add VID for Turtle Beach controllers
Victor Nogueira (1):
net/sched: Abort __tc_modify_qdisc if parent class does not exist
Victor Shih (1):
mmc: sdhci: Add a helper function for dump register in dynamic debug mode
Vladimir Oltean (2):
spi: spi-fsl-dspi: Rename fifo_{read,write} and {tx,cmd}_fifo_write
spi: spi-fsl-dspi: Fix interrupt-less DMA mode taking an XSPI code path
Wang Jinchao (1):
md/raid1: Fix stack memory use after return in raid1_reshape
Weihang Li (1):
RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
Wolfram Sang (2):
i2c: tiny-usb: disable zero-length read messages
i2c: robotfuzz-osif: disable zero-length read messages
Wupeng Ma (1):
VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
Xiaowei Li (1):
net: usb: qmi_wwan: add SIMCom 8230C composition
Yazen Ghannam (2):
x86/mce/amd: Fix threshold limit reset
x86/mce: Don't remove sysfs if thresholding sysfs init fails
Youngjun Lee (1):
ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
Yu Kuai (1):
md/md-bitmap: fix dm-raid max_write_behind setting
Yue Haibing (1):
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
Yue Hu (1):
mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data()
Zhang Heng (1):
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
1 month, 2 weeks
- 1
- 1
[PATCH vulns] CVE-2022-49501: Fix affected versions
by He Zhe
As mentioned in the commit log of the fix, it is
commit 2c9d6c2b871d ("usbnet: run unbind() before unregister_netdev()")
that causes this CVE.
Signed-off-by: He Zhe <zhe.he(a)windriver.com>
---
cve/published/2022/CVE-2022-49501.vulnerable | 1 +
1 file changed, 1 insertion(+)
create mode 100644 cve/published/2022/CVE-2022-49501.vulnerable
diff --git a/cve/published/2022/CVE-2022-49501.vulnerable b/cve/published/2022/CVE-2022-49501.vulnerable
new file mode 100644
index 000000000..138b53caf
--- /dev/null
+++ b/cve/published/2022/CVE-2022-49501.vulnerable
@@ -0,0 +1 @@
+2c9d6c2b871d5841ce26ede3e81fd37e2e33c42c
--
2.34.1
1 month, 2 weeks
- 2
- 1
[PATCH v2] iommu/amd: Fix geometry.aperture_end for V2 tables
by Jason Gunthorpe
The AMD IOMMU documentation seems pretty clear that the V2 table follows
the normal CPU expectation of sign extension. This is shown in
Figure 25: AMD64 Long Mode 4-Kbyte Page Address Translation
Where bits Sign-Extend [63:57] == [56]. This is typical for x86 which
would have three regions in the page table: lower, non-canonical, upper.
The manual describes that the V1 table does not sign extend in section
2.2.4 Sharing AMD64 Processor and IOMMU Page Tables GPA-to-SPA
Further, Vasant has checked this and indicates the HW has an addtional
behavior that the manual does not yet describe. The AMDv2 table does not
have the sign extended behavior when attached to PASID 0, which may
explain why this has gone unnoticed.
The iommu domain geometry does not directly support sign extended page
tables. The driver should report only one of the lower/upper spaces. Solve
this by removing the top VA bit from the geometry to use only the lower
space.
This will also make the iommu_domain work consistently on all PASID 0 and
PASID != 1.
Adjust dma_max_address() to remove the top VA bit. It now returns:
5 Level:
Before 0x1ffffffffffffff
After 0x0ffffffffffffff
4 Level:
Before 0xffffffffffff
After 0x7fffffffffff
Fixes: 11c439a19466 ("iommu/amd/pgtbl_v2: Fix domain max address")
Link: https://lore.kernel.org/all/8858d4d6-d360-4ef0-935c-bfd13ea54f42@amd.com/
Signed-off-by: Jason Gunthorpe <jgg(a)nvidia.com>
---
drivers/iommu/amd/iommu.c | 17 +++++++++++++++--
1 file changed, 15 insertions(+), 2 deletions(-)
v2:
- Revise the commit message and comment with the new information
from Vasant.
v1: https://patch.msgid.link/r/0-v1-6925ece6b623+296-amdv2_geo_jgg@nvidia.com
diff --git a/drivers/iommu/amd/iommu.c b/drivers/iommu/amd/iommu.c
index 3117d99cf83d0d..1baa9d3583f369 100644
--- a/drivers/iommu/amd/iommu.c
+++ b/drivers/iommu/amd/iommu.c
@@ -2526,8 +2526,21 @@ static inline u64 dma_max_address(enum protection_domain_mode pgtable)
if (pgtable == PD_MODE_V1)
return ~0ULL;
- /* V2 with 4/5 level page table */
- return ((1ULL << PM_LEVEL_SHIFT(amd_iommu_gpt_level)) - 1);
+ /*
+ * V2 with 4/5 level page table. Note that "2.2.6.5 AMD64 4-Kbyte Page
+ * Translation" shows that the V2 table sign extends the top of the
+ * address space creating a reserved region in the middle of the
+ * translation, just like the CPU does. Further Vasant says the docs are
+ * incomplete and this only applies to non-zero PASIDs. If the AMDv2
+ * page table is assigned to the 0 PASID then there is no sign extension
+ * check.
+ *
+ * Since the IOMMU must have a fixed geometry, and the core code does
+ * not understand sign extended addressing, we have to chop off the high
+ * bit to get consistent behavior with attachments of the domain to any
+ * PASID.
+ */
+ return ((1ULL << (PM_LEVEL_SHIFT(amd_iommu_gpt_level) - 1)) - 1);
}
static bool amd_iommu_hd_support(struct amd_iommu *iommu)
base-commit: eb328711b15b17987021dbb674f446b7b008dca5
--
2.43.0
1 month, 2 weeks
- 4
- 8
[PATCH] ARM: AM33xx: Implement TI advisory 1.0.36 (EMU0/EMU1 pins state on reset)
by A. Sverdlin
From: Alexander Sverdlin <alexander.sverdlin(a)siemens.com>
There is an issue possible where TI AM33xx SoCs do not boot properly after
a reset if EMU0/EMU1 pins were used as GPIO and have been driving low level
actively prior to reset [1].
"Advisory 1.0.36 EMU0 and EMU1: Terminals Must be Pulled High Before
ICEPick Samples
The state of the EMU[1:0] terminals are latched during reset to determine
ICEPick boot mode. For normal device operation, these terminals must be
pulled up to a valid high logic level ( > VIH min) before ICEPick samples
the state of these terminals, which occurs
[five CLK_M_OSC clock cycles - 10 ns] after the falling edge of WARMRSTn.
Many applications may not require the secondary GPIO function of the
EMU[1:0] terminals. In this case, they would only be connected to pull-up
resistors, which ensures they are always high when ICEPick samples.
However, some applications may need to use these terminals as GPIO where
they could be driven low before reset is asserted. This usage of the
EMU[1:0] terminals may require special attention to ensure the terminals
are allowed to return to a valid high-logic level before ICEPick samples
the state of these terminals.
When any device reset is asserted, the pin mux mode of EMU[1:0] terminals
configured to operate as GPIO (mode 7) will change back to EMU input
(mode 0) on the falling edge of WARMRSTn. This only provides a short period
of time for the terminals to return high if driven low before reset is
asserted...
If the EMU[1:0] terminals are configured to operate as GPIO, the product
should be designed such these terminals can be pulled to a valid high-logic
level within 190 ns after the falling edge of WARMRSTn."
We've noticed this problem with custom am335x hardware in combination with
recently implemented cold reset method
(commit 6521f6a195c70 ("ARM: AM33xx: PRM: Implement REBOOT_COLD")).
It looks like the problem can affect other HW, for instance AM335x
Chiliboard, because the latter has LEDs on GPIO3_7/GPIO3_8 as well.
One option would be to check if the pins are in GPIO mode and either switch
to output active high, or switch to input and poll until the external
pull-ups have brought the pins to the desired high state. But fighting
with GPIO driver for these pins is probably not the most straight forward
approch in a reboot handler.
Fortunately we can easily control pinmuxing here and rely on the external
pull-ups. TI recommends 4k7 external pull up resistors [2] and even with
quite conservative estimation for pin capacity (1 uF should never happen)
the required delay shall not exceed 5ms.
[1] Link: https://www.ti.com/lit/pdf/sprz360
[2] Link: https://e2e.ti.com/support/processors-group/processors/f/processors-forum/8…
Cc: stable(a)vger.kernel.org
Signed-off-by: Alexander Sverdlin <alexander.sverdlin(a)siemens.com>
---
arch/arm/mach-omap2/am33xx-restart.c | 36 ++++++++++++++++++++++++++++
1 file changed, 36 insertions(+)
diff --git a/arch/arm/mach-omap2/am33xx-restart.c b/arch/arm/mach-omap2/am33xx-restart.c
index fcf3d557aa786..3cdf223addcc2 100644
--- a/arch/arm/mach-omap2/am33xx-restart.c
+++ b/arch/arm/mach-omap2/am33xx-restart.c
@@ -2,12 +2,46 @@
/*
* am33xx-restart.c - Code common to all AM33xx machines.
*/
+#include <dt-bindings/pinctrl/am33xx.h>
+#include <linux/delay.h>
#include <linux/kernel.h>
#include <linux/reboot.h>
#include "common.h"
+#include "control.h"
#include "prm.h"
+/*
+ * Advisory 1.0.36 EMU0 and EMU1: Terminals Must be Pulled High Before
+ * ICEPick Samples
+ *
+ * If EMU0/EMU1 pins have been used as GPIO outputs and actively driving low
+ * level, the device might not reboot in normal mode. We are in a bad position
+ * to override GPIO state here, so just switch the pins into EMU input mode
+ * (that's what reset will do anyway) and wait a bit, because the state will be
+ * latched 190 ns after reset.
+ */
+static void am33xx_advisory_1_0_36(void)
+{
+ u32 emu0 = omap_ctrl_readl(AM335X_PIN_EMU0);
+ u32 emu1 = omap_ctrl_readl(AM335X_PIN_EMU1);
+
+ /* If both pins are in EMU mode, nothing to do */
+ if (!(emu0 & 7) && !(emu1 & 7))
+ return;
+
+ /* Switch GPIO3_7/GPIO3_8 into EMU0/EMU1 modes respectively */
+ omap_ctrl_writel(emu0 & ~7, AM335X_PIN_EMU0);
+ omap_ctrl_writel(emu1 & ~7, AM335X_PIN_EMU1);
+
+ /*
+ * Give pull-ups time to load the pin/PCB trace capacity.
+ * 5 ms shall be enough to load 1 uF (would be huge capacity for these
+ * pins) with TI-recommended 4k7 external pull-ups.
+ */
+ mdelay(5);
+}
+
/**
* am33xx_restart - trigger a software restart of the SoC
* @mode: the "reboot mode", see arch/arm/kernel/{setup,process}.c
@@ -18,6 +52,8 @@
*/
void am33xx_restart(enum reboot_mode mode, const char *cmd)
{
+ am33xx_advisory_1_0_36();
+
/* TODO: Handle cmd if necessary */
prm_reboot_mode = mode;
--
2.50.1
1 month, 2 weeks
- 1
- 0
Backport 36569780b0d6 ("sched: Change nr_uninterruptible type to unsigned long") to linux-stable
by Aruna Ramakrishna
Hi maintainers,
Please consider backporting this upstream commit:
36569780b0d6 ("sched: Change nr_uninterruptible type to unsigned long”)
into all stable branches newer than (and including) linux-5.14.y.
This fixes an overflow bug introduced in commit:
e6fe3f422be1 ("sched: Make multiple runqueue task counters 32-bit”)
which was merged into 5.14.
I forgot to tag the original patch for inclusion into stable - I apologize for the
oversight.
The patch should apply cleanly to all versions - let me know if you’d like me to
send a separate patch for stable.
Thanks very much,
Aruna
1 month, 2 weeks
- 1
- 0
[PATCH net] phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
by Nathan Chancellor
A new warning in clang [1] points out a place in pep_sock_accept() where
dst is uninitialized then passed as a const pointer to pep_find_pipe():
net/phonet/pep.c:829:37: error: variable 'dst' is uninitialized when passed as a const pointer argument here [-Werror,-Wuninitialized-const-pointer]
829 | newsk = pep_find_pipe(&pn->hlist, &dst, pipe_handle);
| ^~~:
Move the call to pn_skb_get_dst_sockaddr(), which initializes dst, to
before the call to pep_find_pipe(), so that dst is consistently used
initialized throughout the function.
Cc: stable(a)vger.kernel.org
Fixes: f7ae8d59f661 ("Phonet: allocate sock from accept syscall rather than soft IRQ")
Link: https://github.com/llvm/llvm-project/commit/00dacf8c22f065cb52efb14cd091d44… [1]
Closes: https://github.com/ClangBuiltLinux/linux/issues/2101
Signed-off-by: Nathan Chancellor <nathan(a)kernel.org>
---
net/phonet/pep.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/net/phonet/pep.c b/net/phonet/pep.c
index 53a858478e22..62527e1ebb88 100644
--- a/net/phonet/pep.c
+++ b/net/phonet/pep.c
@@ -826,6 +826,7 @@ static struct sock *pep_sock_accept(struct sock *sk,
}
/* Check for duplicate pipe handle */
+ pn_skb_get_dst_sockaddr(skb, &dst);
newsk = pep_find_pipe(&pn->hlist, &dst, pipe_handle);
if (unlikely(newsk)) {
__sock_put(newsk);
@@ -850,7 +851,6 @@ static struct sock *pep_sock_accept(struct sock *sk,
newsk->sk_destruct = pipe_destruct;
newpn = pep_sk(newsk);
- pn_skb_get_dst_sockaddr(skb, &dst);
pn_skb_get_src_sockaddr(skb, &src);
newpn->pn_sk.sobject = pn_sockaddr_get_object(&dst);
newpn->pn_sk.dobject = pn_sockaddr_get_object(&src);
---
base-commit: 0e9418961f897be59b1fab6e31ae1b09a0bae902
change-id: 20250715-net-phonet-fix-uninit-const-pointer-64f0182b11e1
Best regards,
--
Nathan Chancellor <nathan(a)kernel.org>
1 month, 2 weeks
- 2
- 1
[PATCH v9 1/4] serial: 8250: fix panic due to PSLVERR
by Yunhui Cui
When the PSLVERR_RESP_EN parameter is set to 1, the device generates
an error response if an attempt is made to read an empty RBR (Receive
Buffer Register) while the FIFO is enabled.
In serial8250_do_startup(), calling serial_port_out(port, UART_LCR,
UART_LCR_WLEN8) triggers dw8250_check_lcr(), which invokes
dw8250_force_idle() and serial8250_clear_and_reinit_fifos(). The latter
function enables the FIFO via serial_out(p, UART_FCR, p->fcr).
Execution proceeds to the serial_port_in(port, UART_RX).
This satisfies the PSLVERR trigger condition.
When another CPU (e.g., using printk()) is accessing the UART (UART
is busy), the current CPU fails the check (value & ~UART_LCR_SPAR) ==
(lcr & ~UART_LCR_SPAR) in dw8250_check_lcr(), causing it to enter
dw8250_force_idle().
Put serial_port_out(port, UART_LCR, UART_LCR_WLEN8) under the port->lock
to fix this issue.
Panic backtrace:
[ 0.442336] Oops - unknown exception [#1]
[ 0.442343] epc : dw8250_serial_in32+0x1e/0x4a
[ 0.442351] ra : serial8250_do_startup+0x2c8/0x88e
...
[ 0.442416] console_on_rootfs+0x26/0x70
Fixes: c49436b657d0 ("serial: 8250_dw: Improve unwritable LCR workaround")
Link: https://lore.kernel.org/all/84cydt5peu.fsf@jogness.linutronix.de/T/
Signed-off-by: Yunhui Cui <cuiyunhui(a)bytedance.com>
Cc: stable(a)vger.kernel.org
---
drivers/tty/serial/8250/8250_port.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/tty/serial/8250/8250_port.c b/drivers/tty/serial/8250/8250_port.c
index 6d7b8c4667c9c..07fe818dffa34 100644
--- a/drivers/tty/serial/8250/8250_port.c
+++ b/drivers/tty/serial/8250/8250_port.c
@@ -2376,9 +2376,10 @@ int serial8250_do_startup(struct uart_port *port)
/*
* Now, initialize the UART
*/
- serial_port_out(port, UART_LCR, UART_LCR_WLEN8);
uart_port_lock_irqsave(port, &flags);
+ serial_port_out(port, UART_LCR, UART_LCR_WLEN8);
+
if (up->port.flags & UPF_FOURPORT) {
if (!up->port.irq)
up->port.mctrl |= TIOCM_OUT1;
--
2.39.5
1 month, 2 weeks
- 4
- 3
[PATCH v2 1/3] bus: mhi: host: keep bhi buffer through suspend cycle
by Muhammad Usama Anjum
When there is memory pressure, at resume time dma_alloc_coherent()
returns error which in turn fails the loading of firmware and hence
the driver crashes:
kernel: kworker/u33:5: page allocation failure: order:7,
mode:0xc04(GFP_NOIO|GFP_DMA32), nodemask=(null),cpuset=/,mems_allowed=0
kernel: CPU: 1 UID: 0 PID: 7693 Comm: kworker/u33:5 Not tainted 6.11.11-valve17-1-neptune-611-g027868a0ac03 #1 3843143b92e9da0fa2d3d5f21f51beaed15c7d59
kernel: Hardware name: Valve Galileo/Galileo, BIOS F7G0112 08/01/2024
kernel: Workqueue: mhi_hiprio_wq mhi_pm_st_worker [mhi]
kernel: Call Trace:
kernel: <TASK>
kernel: dump_stack_lvl+0x4e/0x70
kernel: warn_alloc+0x164/0x190
kernel: ? srso_return_thunk+0x5/0x5f
kernel: ? __alloc_pages_direct_compact+0xaf/0x360
kernel: __alloc_pages_slowpath.constprop.0+0xc75/0xd70
kernel: __alloc_pages_noprof+0x321/0x350
kernel: __dma_direct_alloc_pages.isra.0+0x14a/0x290
kernel: dma_direct_alloc+0x70/0x270
kernel: mhi_fw_load_handler+0x126/0x340 [mhi a96cb91daba500cc77f86bad60c1f332dc3babdf]
kernel: mhi_pm_st_worker+0x5e8/0xac0 [mhi a96cb91daba500cc77f86bad60c1f332dc3babdf]
kernel: ? srso_return_thunk+0x5/0x5f
kernel: process_one_work+0x17e/0x330
kernel: worker_thread+0x2ce/0x3f0
kernel: ? __pfx_worker_thread+0x10/0x10
kernel: kthread+0xd2/0x100
kernel: ? __pfx_kthread+0x10/0x10
kernel: ret_from_fork+0x34/0x50
kernel: ? __pfx_kthread+0x10/0x10
kernel: ret_from_fork_asm+0x1a/0x30
kernel: </TASK>
kernel: Mem-Info:
kernel: active_anon:513809 inactive_anon:152 isolated_anon:0
active_file:359315 inactive_file:2487001 isolated_file:0
unevictable:637 dirty:19 writeback:0
slab_reclaimable:160391 slab_unreclaimable:39729
mapped:175836 shmem:51039 pagetables:4415
sec_pagetables:0 bounce:0
kernel_misc_reclaimable:0
free:125666 free_pcp:0 free_cma:0
In above example, if we sum all the consumed memory, it comes out
to be 15.5GB and free memory is ~ 500MB from a total of 16GB RAM.
Even though memory is present. But all of the dma memory has been
exhausted or fragmented.
Fix it by allocating it only once and then reuse the same allocated
memory. As we'll allocate this memory only once, this memory will stay
allocated.
Tested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
Fixes: cd457afb1667 ("bus: mhi: core: Add support for downloading firmware over BHIe")
Cc: stable(a)vger.kernel.org
Cc: Krishna Chaitanya Chundru <krishna.chundru(a)oss.qualcomm.com>
Signed-off-by: Muhammad Usama Anjum <usama.anjum(a)collabora.com>
---
Reported here:
https://lore.kernel.org/all/ead32f5b-730a-4b81-b38f-93d822f990c6@collabora.…
Still a lot of more fixes are required. Hence, I'm not adding closes tag.
Changes since v1:
- fix mhi_load_image_bhi()
- Cc stable and fix tested on tag
---
drivers/bus/mhi/host/boot.c | 25 +++++++++++++++----------
drivers/bus/mhi/host/init.c | 5 +++++
drivers/bus/mhi/host/internal.h | 2 ++
include/linux/mhi.h | 1 +
4 files changed, 23 insertions(+), 10 deletions(-)
diff --git a/drivers/bus/mhi/host/boot.c b/drivers/bus/mhi/host/boot.c
index b3a85aa3c4768..9fc983bc12d49 100644
--- a/drivers/bus/mhi/host/boot.c
+++ b/drivers/bus/mhi/host/boot.c
@@ -302,8 +302,8 @@ static int mhi_fw_load_bhi(struct mhi_controller *mhi_cntrl,
return -EIO;
}
-static void mhi_free_bhi_buffer(struct mhi_controller *mhi_cntrl,
- struct image_info *image_info)
+void mhi_free_bhi_buffer(struct mhi_controller *mhi_cntrl,
+ struct image_info *image_info)
{
struct mhi_buf *mhi_buf = image_info->mhi_buf;
@@ -455,18 +455,23 @@ static enum mhi_fw_load_type mhi_fw_load_type_get(const struct mhi_controller *m
static int mhi_load_image_bhi(struct mhi_controller *mhi_cntrl, const u8 *fw_data, size_t size)
{
- struct image_info *image;
+ struct image_info **image = &mhi_cntrl->bhi_image;
int ret;
- ret = mhi_alloc_bhi_buffer(mhi_cntrl, &image, size);
- if (ret)
- return ret;
+ if (!(*image)) {
+ ret = mhi_alloc_bhi_buffer(mhi_cntrl, image, size);
+ if (ret)
+ return ret;
- /* Load the firmware into BHI vec table */
- memcpy(image->mhi_buf->buf, fw_data, size);
+ /* Load the firmware into BHI vec table */
+ memcpy((*image)->mhi_buf->buf, fw_data, size);
+ }
- ret = mhi_fw_load_bhi(mhi_cntrl, &image->mhi_buf[image->entries - 1]);
- mhi_free_bhi_buffer(mhi_cntrl, image);
+ ret = mhi_fw_load_bhi(mhi_cntrl, &(*image)->mhi_buf[(*image)->entries - 1]);
+ if (ret) {
+ mhi_free_bhi_buffer(mhi_cntrl, *image);
+ *image = NULL;
+ }
return ret;
}
diff --git a/drivers/bus/mhi/host/init.c b/drivers/bus/mhi/host/init.c
index 6e06e4efec765..2e0f18c939e68 100644
--- a/drivers/bus/mhi/host/init.c
+++ b/drivers/bus/mhi/host/init.c
@@ -1228,6 +1228,11 @@ void mhi_unprepare_after_power_down(struct mhi_controller *mhi_cntrl)
mhi_cntrl->rddm_image = NULL;
}
+ if (mhi_cntrl->bhi_image) {
+ mhi_free_bhi_buffer(mhi_cntrl, mhi_cntrl->bhi_image);
+ mhi_cntrl->bhi_image = NULL;
+ }
+
mhi_deinit_dev_ctxt(mhi_cntrl);
}
EXPORT_SYMBOL_GPL(mhi_unprepare_after_power_down);
diff --git a/drivers/bus/mhi/host/internal.h b/drivers/bus/mhi/host/internal.h
index 1054e67bb450d..60b0699323375 100644
--- a/drivers/bus/mhi/host/internal.h
+++ b/drivers/bus/mhi/host/internal.h
@@ -324,6 +324,8 @@ int mhi_alloc_bhie_table(struct mhi_controller *mhi_cntrl,
struct image_info **image_info, size_t alloc_size);
void mhi_free_bhie_table(struct mhi_controller *mhi_cntrl,
struct image_info *image_info);
+void mhi_free_bhi_buffer(struct mhi_controller *mhi_cntrl,
+ struct image_info *image_info);
/* Power management APIs */
enum mhi_pm_state __must_check mhi_tryset_pm_state(
diff --git a/include/linux/mhi.h b/include/linux/mhi.h
index 4c567907933a5..593012f779d97 100644
--- a/include/linux/mhi.h
+++ b/include/linux/mhi.h
@@ -391,6 +391,7 @@ struct mhi_controller {
size_t reg_len;
struct image_info *fbc_image;
struct image_info *rddm_image;
+ struct image_info *bhi_image;
struct mhi_chan *mhi_chan;
struct list_head lpm_chans;
int *irq;
--
2.39.5
1 month, 2 weeks
- 3
- 4
[PATCH v2 0/1] nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails
by Rick Wertenbroek
Changes from v1 :
- Updated comment for nvmet_pci_epf_queue_response() per Damien's suggestion.
- Fixed typo in commit message.
- Added 3 tags in commit message:
Reviewed-by: Damien Le Moal <dlemoal(a)kernel.org>
Fixes: 0faa0fe6f90e ("nvmet: New NVMe PCI endpoint function target driver")
Cc: stable(a)vger.kernel.org
Best regards,
Rick
Rick Wertenbroek (1):
nvmet: pci-epf: Do not complete commands twice if nvmet_req_init()
fails
drivers/nvme/target/pci-epf.c | 23 ++++++++++++++++-------
1 file changed, 16 insertions(+), 7 deletions(-)
--
2.25.1
1 month, 2 weeks
- 4
- 4
[PATCH v2 1/1] arm64: dts: qcom: x1e80100-pmics: Disable pm8010 by default
by Aleksandrs Vinarskis
pm8010 is a camera specific PMIC, and may not be present on some
devices. These may instead use a dedicated vreg for this purpose (Dell
XPS 9345, Dell Inspiron..) or use USB webcam instead of a MIPI one
alltogether (Lenovo Thinbook 16, Lenovo Yoga..).
Disable pm8010 by default, let platforms that actually have one onboard
enable it instead.
Cc: <stable(a)vger.kernel.org>
Fixes: 2559e61e7ef4 ("arm64: dts: qcom: x1e80100-pmics: Add the missing PMICs")
Reviewed-by: Bryan O'Donoghue <bryan.odonoghue(a)linaro.org>
Reviewed-by: Johan Hovold <johan+linaro(a)kernel.org>
Reviewed-by: Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com>
Signed-off-by: Aleksandrs Vinarskis <alex.vinarskis(a)gmail.com>
---
arch/arm64/boot/dts/qcom/x1e80100-pmics.dtsi | 2 ++
1 file changed, 2 insertions(+)
diff --git a/arch/arm64/boot/dts/qcom/x1e80100-pmics.dtsi b/arch/arm64/boot/dts/qcom/x1e80100-pmics.dtsi
index e3888bc143a0..621890ada153 100644
--- a/arch/arm64/boot/dts/qcom/x1e80100-pmics.dtsi
+++ b/arch/arm64/boot/dts/qcom/x1e80100-pmics.dtsi
@@ -475,6 +475,8 @@ pm8010: pmic@c {
#address-cells = <1>;
#size-cells = <0>;
+ status = "disabled";
+
pm8010_temp_alarm: temp-alarm@2400 {
compatible = "qcom,spmi-temp-alarm";
reg = <0x2400>;
--
2.48.1
1 month, 2 weeks
- 1
- 1
[PATCH v2] drm/sched: Remove optimization that causes hang when killing dependent jobs
by Lin.Cao
When application A submits jobs and application B submits a job with a
dependency on A's fence, the normal flow wakes up the scheduler after
processing each job. However, the optimization in
drm_sched_entity_add_dependency_cb() uses a callback that only clears
dependencies without waking up the scheduler.
When application A is killed before its jobs can run, the callback gets
triggered but only clears the dependency without waking up the scheduler,
causing the scheduler to enter sleep state and application B to hang.
Remove the optimization by deleting drm_sched_entity_clear_dep() and its
usage, ensuring the scheduler is always woken up when dependencies are
cleared.
Fixes: 777dbd458c89 ("drm/amdgpu: drop a dummy wakeup scheduler")
Cc: stable(a)vger.kernel.org # v4.6+
Signed-off-by: Lin.Cao <lincao12(a)amd.com>
Reviewed-by: Christian König <christian.koenig(a)amd.com>
---
drivers/gpu/drm/scheduler/sched_entity.c | 21 ++-------------------
1 file changed, 2 insertions(+), 19 deletions(-)
diff --git a/drivers/gpu/drm/scheduler/sched_entity.c b/drivers/gpu/drm/scheduler/sched_entity.c
index e671aa241720..ac678de7fe5e 100644
--- a/drivers/gpu/drm/scheduler/sched_entity.c
+++ b/drivers/gpu/drm/scheduler/sched_entity.c
@@ -355,17 +355,6 @@ void drm_sched_entity_destroy(struct drm_sched_entity *entity)
}
EXPORT_SYMBOL(drm_sched_entity_destroy);
-/* drm_sched_entity_clear_dep - callback to clear the entities dependency */
-static void drm_sched_entity_clear_dep(struct dma_fence *f,
- struct dma_fence_cb *cb)
-{
- struct drm_sched_entity *entity =
- container_of(cb, struct drm_sched_entity, cb);
-
- entity->dependency = NULL;
- dma_fence_put(f);
-}
-
/*
* drm_sched_entity_wakeup - callback to clear the entity's dependency and
* wake up the scheduler
@@ -376,7 +365,8 @@ static void drm_sched_entity_wakeup(struct dma_fence *f,
struct drm_sched_entity *entity =
container_of(cb, struct drm_sched_entity, cb);
- drm_sched_entity_clear_dep(f, cb);
+ entity->dependency = NULL;
+ dma_fence_put(f);
drm_sched_wakeup(entity->rq->sched);
}
@@ -429,13 +419,6 @@ static bool drm_sched_entity_add_dependency_cb(struct drm_sched_entity *entity)
fence = dma_fence_get(&s_fence->scheduled);
dma_fence_put(entity->dependency);
entity->dependency = fence;
- if (!dma_fence_add_callback(fence, &entity->cb,
- drm_sched_entity_clear_dep))
- return true;
-
- /* Ignore it when it is already scheduled */
- dma_fence_put(fence);
- return false;
}
if (!dma_fence_add_callback(entity->dependency, &entity->cb,
--
2.46.1
1 month, 2 weeks
- 2
- 1
[PATCH v4 2/9] vsock/virtio: Validate length in packet header before skb_put()
by Will Deacon
When receiving a vsock packet in the guest, only the virtqueue buffer
size is validated prior to virtio_vsock_skb_rx_put(). Unfortunately,
virtio_vsock_skb_rx_put() uses the length from the packet header as the
length argument to skb_put(), potentially resulting in SKB overflow if
the host has gone wonky.
Validate the length as advertised by the packet header before calling
virtio_vsock_skb_rx_put().
Cc: <stable(a)vger.kernel.org>
Fixes: 71dc9ec9ac7d ("virtio/vsock: replace virtio_vsock_pkt with sk_buff")
Signed-off-by: Will Deacon <will(a)kernel.org>
---
net/vmw_vsock/virtio_transport.c | 12 ++++++++++--
1 file changed, 10 insertions(+), 2 deletions(-)
diff --git a/net/vmw_vsock/virtio_transport.c b/net/vmw_vsock/virtio_transport.c
index f0e48e6911fc..eb08a393413d 100644
--- a/net/vmw_vsock/virtio_transport.c
+++ b/net/vmw_vsock/virtio_transport.c
@@ -624,8 +624,9 @@ static void virtio_transport_rx_work(struct work_struct *work)
do {
virtqueue_disable_cb(vq);
for (;;) {
+ unsigned int len, payload_len;
+ struct virtio_vsock_hdr *hdr;
struct sk_buff *skb;
- unsigned int len;
if (!virtio_transport_more_replies(vsock)) {
/* Stop rx until the device processes already
@@ -642,12 +643,19 @@ static void virtio_transport_rx_work(struct work_struct *work)
vsock->rx_buf_nr--;
/* Drop short/long packets */
- if (unlikely(len < sizeof(struct virtio_vsock_hdr) ||
+ if (unlikely(len < sizeof(*hdr) ||
len > virtio_vsock_skb_len(skb))) {
kfree_skb(skb);
continue;
}
+ hdr = virtio_vsock_hdr(skb);
+ payload_len = le32_to_cpu(hdr->len);
+ if (unlikely(payload_len > len - sizeof(*hdr))) {
+ kfree_skb(skb);
+ continue;
+ }
+
virtio_vsock_skb_rx_put(skb);
virtio_transport_deliver_tap_pkt(skb);
virtio_transport_recv_pkt(&virtio_transport, skb);
--
2.50.0.727.gbf7dc18ff4-goog
1 month, 2 weeks
- 2
- 1
[PATCH 5.10 000/209] 5.10.240-rc3 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.10.240 release.
There are 209 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 17 Jul 2025 16:35:35 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.240-r…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.10.240-rc3
Michael Jeanson <mjeanson(a)efficios.com>
rseq: Fix segfault on registration when rseq_cs is non-zero
Borislav Petkov <bp(a)kernel.org>
x86/process: Move the buffer clearing before MONITOR
Borislav Petkov <bp(a)kernel.org>
KVM: SVM: Advertise TSA CPUID bits to guests
Borislav Petkov <bp(a)kernel.org>
KVM: x86: add support for CPUID leaf 0x80000021
Borislav Petkov <bp(a)kernel.org>
x86/bugs: Add a Transient Scheduler Attacks mitigation
Borislav Petkov <bp(a)kernel.org>
x86/bugs: Rename MDS machinery to something more generic
Jann Horn <jannh(a)google.com>
x86/mm: Disable hugetlb page table sharing on 32-bit
Dongli Zhang <dongli.zhang(a)oracle.com>
vhost-scsi: protect vq->log_used with vq->mutex
Hans de Goede <hdegoede(a)redhat.com>
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com>
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Zhang Heng <zhangheng(a)kylinos.cn>
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
Nicolas Pitre <npitre(a)baylibre.com>
vt: add missing notification when switching back to text mode
Xiaowei Li <xiaowei.li(a)simcom.com>
net: usb: qmi_wwan: add SIMCom 8230C composition
Tiwei Bie <tiwei.btw(a)antgroup.com>
um: vector: Reduce stack usage in vector_eth_configure()
Thomas Fourier <fourier.thomas(a)gmail.com>
atm: idt77252: Add missing `dma_map_error()`
Somnath Kotur <somnath.kotur(a)broadcom.com>
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Fix DCB ETS validation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
Sean Nyekjaer <sean(a)geanix.com>
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
Oleksij Rempel <linux(a)rempel-privat.de>
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
Kito Xu <veritas501(a)foxmail.com>
net: appletalk: Fix device refcount leak in atrtr_create()
Wang Jinchao <wangjinchao600(a)gmail.com>
md/raid1: Fix stack memory use after return in raid1_reshape
Daniil Dulov <d.dulov(a)aladdin.ru>
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
Christian König <christian.koenig(a)amd.com>
dma-buf: fix timeout handling in dma_resv_wait_timeout v2
Nilton Perim Neto <niltonperimneto(a)gmail.com>
Input: xpad - support Acer NGR 200 Controller
Vicki Pfau <vi(a)endrift.com>
Input: xpad - add VID for Turtle Beach controllers
Matt Reynolds <mattreynolds(a)chromium.org>
Input: xpad - add support for Amazon Game Controller
Jakub Kicinski <kuba(a)kernel.org>
netlink: make sure we allow at least one dump skb
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix rmem check in netlink_broadcast_deliver().
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Ensure to disable clocks in error path
Alexandre Belloni <alexandre.belloni(a)bootlin.com>
rtc: lib_test: add MODULE_LICENSE
Thomas Fourier <fourier.thomas(a)gmail.com>
ethernet: atl1: Add missing DMA mapping error checks and count errors
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "ACPI: battery: negate current when discharging"
Kuen-Han Tsai <khtsai(a)google.com>
usb: gadget: u_serial: Fix race condition in TTY wakeup
Matthew Brost <matthew.brost(a)intel.com>
drm/sched: Increment job count before swapping tail spsc queue
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
JP Kobryn <inwardvessel(a)gmail.com>
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce: Don't remove sysfs if thresholding sysfs init fails
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Fix threshold limit reset
Peter Zijlstra <peterz(a)infradead.org>
x86/its: FineIBT-paranoid vs ITS
Eric Biggers <ebiggers(a)google.com>
x86/its: Fix build errors when CONFIG_MODULES=n
Peter Zijlstra <peterz(a)infradead.org>
x86/its: Use dynamic thunks for indirect branches
Thomas Gleixner <tglx(a)linutronix.de>
x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc()
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/its: Add "vmexit" option to skip mitigation on some CPUs
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/its: Enable Indirect Target Selection mitigation
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/its: Fix undefined reference to cpu_wants_rethunk_at()
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/its: Add support for ITS-safe return thunk
Josh Poimboeuf <jpoimboe(a)kernel.org>
x86/alternatives: Remove faulty optimization
Borislav Petkov (AMD) <bp(a)alien8.de>
x86/alternative: Optimize returns patching
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/its: Add support for ITS-safe indirect thunk
Peter Zijlstra <peterz(a)infradead.org>
x86/alternatives: Teach text_poke_bp() to patch Jcc.d32 instructions
Peter Zijlstra <peterz(a)infradead.org>
x86/alternatives: Introduce int3_emulate_jcc()
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
x86/its: Enumerate Indirect Target Selection (ITS) bug
Daniel Sneddon <daniel.sneddon(a)linux.intel.com>
x86/bhi: Define SPEC_CTRL_BHI_DIS_S
Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com>
Documentation: x86/bugs/its: Add ITS documentation
David Howells <dhowells(a)redhat.com>
rxrpc: Fix oops due to non-existence of prealloc backlog struct
Oleg Nesterov <oleg(a)redhat.com>
fs/proc: do_task_stat: use __for_each_thread()
Victor Nogueira <victor(a)mojatatu.com>
net/sched: Abort __tc_modify_qdisc if parent class does not exist
Yue Haibing <yuehaibing(a)huawei.com>
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix infinite recursive call of clip_push().
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix memory leak of struct clip_vcc.
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
Oleksij Rempel <linux(a)rempel-privat.de>
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
Oleksij Rempel <linux(a)rempel-privat.de>
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_* TOCTOU
Andra Paraschiv <andraprs(a)amazon.com>
af_vsock: Assign the vsock transport considering the vsock address flags
Andra Paraschiv <andraprs(a)amazon.com>
af_vsock: Set VMADDR_FLAG_TO_HOST flag on the receive path
Andra Paraschiv <andraprs(a)amazon.com>
vm_sockets: Add VMADDR_FLAG_TO_HOST vsock flag
Andra Paraschiv <andraprs(a)amazon.com>
vm_sockets: Add flags field in the vsock address data structure
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_{g2h,h2g} TOCTOU
Kuniyuki Iwashima <kuniyu(a)google.com>
tipc: Fix use-after-free in tipc_conn_close().
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix wraparounds of sk->sk_rmem_alloc.
Al Viro <viro(a)zeniv.linux.org.uk>
fix proc_sys_compare() handling of in-lookup dentries
Peter Zijlstra <peterz(a)infradead.org>
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
Kaustabh Chakraborty <kauschluss(a)disroot.org>
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
Nathan Chancellor <nathan(a)kernel.org>
staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Rollback non processed entities on error
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Send control events for partial succeeds
Ricardo Ribalda <ribalda(a)chromium.org>
media: uvcvideo: Return the number of processed controls
Seiji Nishikawa <snishika(a)redhat.com>
ACPI: PAD: fix crash in exit_round_robin()
Andrei Kuchynski <akuchynski(a)chromium.org>
usb: typec: displayport: Fix potential deadlock
Oliver Neukum <oneukum(a)suse.com>
Logitech C-270 even more broken
Mathias Nyman <mathias.nyman(a)linux.intel.com>
xhci: dbc: Flush queued requests before stopping dbc
Łukasz Bartosik <ukaszb(a)chromium.org>
xhci: dbctty: disable ECHO flag by default
Fushuai Wang <wangfushuai(a)baidu.com>
dpaa2-eth: fix xdp_rxq_info leak
Ioana Ciornei <ioana.ciornei(a)nxp.com>
net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats
Radu Bulie <radu-andrei.bulie(a)nxp.com>
dpaa2-eth: Update SINGLE_STEP register access
Radu Bulie <radu-andrei.bulie(a)nxp.com>
dpaa2-eth: Update dpni_get_single_step_cfg command
Ioana Ciornei <ioana.ciornei(a)nxp.com>
dpaa2-eth: rename dpaa2_eth_xdp_release_buf into dpaa2_eth_recycle_buf
Filipe Manana <fdmanana(a)suse.com>
btrfs: use btrfs_record_snapshot_destroy() during rmdir
Filipe Manana <fdmanana(a)suse.com>
btrfs: propagate last_unlink_trans earlier when doing a rmdir
Trond Myklebust <trond.myklebust(a)hammerspace.com>
NFSv4/flexfiles: Fix handling of NFS level errors in I/O
Tigran Mkrtchyan <tigran.mkrtchyan(a)desy.de>
flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes
Patrisious Haddad <phaddad(a)nvidia.com>
RDMA/mlx5: Fix vport loopback for MPV device
Maíra Canal <mcanal(a)igalia.com>
drm/v3d: Disable interrupts before resetting the GPU
Sergey Senozhatsky <senozhatsky(a)chromium.org>
mtk-sd: reset host->mrq on prepare_data() error
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
mtk-sd: Prevent memory corruption from DMA map failure
Yue Hu <huyue2(a)yulong.com>
mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data()
Manivannan Sadhasivam <mani(a)kernel.org>
regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
Uladzislau Rezki (Sony) <urezki(a)gmail.com>
rcu: Return early if callback is not specified
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
ACPICA: Refuse to evaluate a method if arguments are missing
Johannes Berg <johannes.berg(a)intel.com>
wifi: ath6kl: remove WARN on bad firmware input
Johannes Berg <johannes.berg(a)intel.com>
wifi: mac80211: drop invalid source address OCB frames
Maurizio Lombardi <mlombard(a)redhat.com>
scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
Madhavan Srinivasan <maddy(a)linux.ibm.com>
powerpc: Fix struct termio related ioctl macros
Johannes Berg <johannes.berg(a)intel.com>
ata: pata_cs5536: fix build on 32-bit UML
Takashi Iwai <tiwai(a)suse.de>
ALSA: sb: Force to disable DMAs once when DMA mode is changed
Lion Ackermann <nnamrec(a)gmail.com>
net/sched: Always pass notifications when child class becomes empty
Thomas Fourier <fourier.thomas(a)gmail.com>
nui: Fix dma_mapping_error() check
Kohei Enju <enjuk(a)amazon.com>
rose: fix dangling neighbour pointers in rose_rt_device_down()
Gustavo A. R. Silva <gustavoars(a)kernel.org>
net: rose: Fix fall-through warnings for Clang
Alok Tiwari <alok.a.tiwari(a)oracle.com>
enic: fix incorrect MTU comparison in enic_change_mtu()
Raju Rangoju <Raju.Rangoju(a)amd.com>
amd-xgbe: align CL37 AN sequence as per databook
Dan Carpenter <dan.carpenter(a)linaro.org>
lib: test_objagg: Set error message in check_expect_hints_stats()
Janusz Krzysztofik <janusz.krzysztofik(a)linux.intel.com>
drm/i915/gt: Fix timeline left held on VMA alloc error
Dan Carpenter <dan.carpenter(a)linaro.org>
drm/i915/selftests: Change mock_request() to return error pointers
James Clark <james.clark(a)linaro.org>
spi: spi-fsl-dspi: Clear completion counter before initiating transfer
Marek Szyprowski <m.szyprowski(a)samsung.com>
drm/exynos: fimd: Guard display clock control with runtime PM calls
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix missing error handling when searching for inode refs during log replay
Patrisious Haddad <phaddad(a)nvidia.com>
RDMA/mlx5: Fix CC counters query for MPV
Bart Van Assche <bvanassche(a)acm.org>
scsi: ufs: core: Fix spelling of a sysfs attribute name
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
Thomas Fourier <fourier.thomas(a)gmail.com>
scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
Benjamin Coddington <bcodding(a)redhat.com>
NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
Kuniyuki Iwashima <kuniyu(a)google.com>
nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
Mark Zhang <markzhang(a)nvidia.com>
RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
David Thompson <davthompson(a)nvidia.com>
platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
Masami Hiramatsu (Google) <mhiramat(a)kernel.org>
mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
RD Babiera <rdbabiera(a)google.com>
usb: typec: altmodes/displayport: do not index invalid pin_assignments
Ulf Hansson <ulf.hansson(a)linaro.org>
Revert "mmc: sdhci: Disable SD card clock before changing parameters"
Victor Shih <victor.shih(a)genesyslogic.com.tw>
mmc: sdhci: Add a helper function for dump register in dynamic debug mode
HarshaVardhana S A <harshavardhana.sa(a)broadcom.com>
vsock/vmci: Clear the vmci transport packet properly when initializing it
Mateusz Jończyk <mat.jonczyk(a)o2.pl>
rtc: cmos: use spin_lock_irqsave in cmos_interrupt
Dev Jain <dev.jain(a)arm.com>
arm64: Restrict pagetable teardown to avoid false warning
Brett A C Sheffield (Librecast) <bacs(a)librecast.net>
Revert "ipv6: save dontfrag in cork"
Nathan Chancellor <nathan(a)kernel.org>
s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
Dexuan Cui <decui(a)microsoft.com>
PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time
Aradhya Bhatia <a-bhatia1(a)ti.com>
drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
Aradhya Bhatia <a-bhatia1(a)ti.com>
drm/bridge: cdns-dsi: Check return value when getting default PHY config
Aradhya Bhatia <a-bhatia1(a)ti.com>
drm/bridge: cdns-dsi: Fix connecting to next bridge
Aradhya Bhatia <a-bhatia1(a)ti.com>
drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
Jay Cornwall <jay.cornwall(a)amd.com>
drm/amdkfd: Fix race in GWS queue scheduling
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/udl: Unregister device before cleaning up on disconnect
Qiu-ji Chen <chenqiuji666(a)gmail.com>
drm/tegra: Fix a possible null pointer dereference
Thierry Reding <treding(a)nvidia.com>
drm/tegra: Assign plane type before registration
Qasim Ijaz <qasdev00(a)gmail.com>
HID: wacom: fix kobject reference count leak
Qasim Ijaz <qasdev00(a)gmail.com>
HID: wacom: fix memory leak on sysfs attribute creation failure
Qasim Ijaz <qasdev00(a)gmail.com>
HID: wacom: fix memory leak on kobject creation failure
Mark Harmstone <maharmstone(a)fb.com>
btrfs: update superblock's device bytes_used when dropping chunk
Heinz Mauelshagen <heinzm(a)redhat.com>
dm-raid: fix variable in journal device check
Frédéric Danis <frederic.danis(a)collabora.com>
Bluetooth: L2CAP: Fix L2CAP MTU negotiation
Yao Zi <ziyao(a)disroot.org>
dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
Simon Horman <horms(a)kernel.org>
net: enetc: Correct endianness handling in _enetc_rd_reg64
Tiwei Bie <tiwei.btw(a)antgroup.com>
um: ubd: Add missing error check in start_io_thread()
Stefano Garzarella <sgarzare(a)redhat.com>
vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
Lachlan Hodges <lachlan.hodges(a)morsemicro.com>
wifi: mac80211: fix beacon interval calculation overflow
Yuan Chen <chenyuan(a)kylinos.cn>
libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
Al Viro <viro(a)zeniv.linux.org.uk>
attach_recursive_mnt(): do not lock the covering tree when sliding something under it
Youngjun Lee <yjjuny.lee(a)samsung.com>
ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
Eric Dumazet <edumazet(a)google.com>
atm: clip: prevent NULL deref in clip_push()
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i2c: robotfuzz-osif: disable zero-length read messages
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
i2c: tiny-usb: disable zero-length read messages
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_sfq: reject invalid perturb period
Niklas Cassel <cassel(a)kernel.org>
PCI: cadence-ep: Correct PBA offset in .set_msix() callback
Long Li <longli(a)microsoft.com>
uio_hv_generic: Align ring size to system page
Saurabh Sengar <ssengar(a)linux.microsoft.com>
uio_hv_generic: Query the ringbuffer size for device
Saurabh Sengar <ssengar(a)linux.microsoft.com>
Drivers: hv: vmbus: Add utility function for querying ring size
Vitaly Kuznetsov <vkuznets(a)redhat.com>
Drivers: hv: Rename 'alloced' to 'allocated'
Haiyang Zhang <haiyangz(a)microsoft.com>
Drivers: hv: vmbus: Fix duplicate CPU assignments within a device
Alexandru Ardelean <alexandru.ardelean(a)analog.com>
uio: uio_hv_generic: use devm_kzalloc() for private data alloc
Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com>
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
Weihang Li <liweihang(a)huawei.com>
RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
Chao Yu <chao(a)kernel.org>
f2fs: don't over-report free space or inodes in statvfs
Brett Werling <brett.werling(a)garmin.com>
can: tcan4x5x: fix power regulator retrieval during probe
Marek Szyprowski <m.szyprowski(a)samsung.com>
media: omap3isp: use sgtable-based scatterlist wrappers
Vasiliy Kovalev <kovalev(a)altlinux.org>
jfs: validate AG parameters in dbMount() to prevent crashes
Dave Kleikamp <dave.kleikamp(a)oracle.com>
fs/jfs: consolidate sanity checking in dbMount
Amit Sunil Dhamne <amitsd(a)google.com>
usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
Junlin Yang <yangjunlin(a)yulong.com>
usb: typec: tcpci_maxim: add terminating newlines to logging
Junlin Yang <yangjunlin(a)yulong.com>
usb: typec: tcpci_maxim: remove redundant assignment
Badhri Jagan Sridharan <badhri(a)google.com>
usb: typec: tcpci_maxim: Fix uninitialized return variable
Wupeng Ma <mawupeng1(a)huawei.com>
VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
George Kennedy <george.kennedy(a)oracle.com>
VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF
Dave Penkler <dpenkler(a)gmail.com>
usb: usbtmc: Fix read_stb function and get_stb ioctl
Dave Penkler <dpenkler(a)gmail.com>
USB: usbtmc: Add USBTMC_IOCTL_GET_STB
Dave Penkler <dpenkler(a)gmail.com>
USB: usbtmc: Fix reading stale status byte
Kees Cook <kees(a)kernel.org>
ovl: Check for NULL d_inode() in ovl_dentry_upper()
Dmitry Kandybka <d.kandybka(a)gmail.com>
ceph: fix possible integer overflow in ceph_zero_objects()
Vijendar Mukunda <Vijendar.Mukunda(a)amd.com>
ALSA: hda: Add new pci id for AMD GPU display HD audio controller
Cezary Rojewski <cezary.rojewski(a)intel.com>
ALSA: hda: Ignore unsol events for cards being shut down
Jos Wang <joswang(a)lenovo.com>
usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
Robert Hodaszi <robert.hodaszi(a)digi.com>
usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
usb: Add checks for snprintf() calls in usb_alloc_dev()
Chance Yang <chance.yang(a)kneron.us>
usb: common: usb-conn-gpio: use a unique name for usb connector device
Chen Yufeng <chenyufeng(a)iie.ac.cn>
usb: potential integer overflow in usbg_make_tpg()
Sami Tolvanen <samitolvanen(a)google.com>
um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
Jonathan Cameron <Jonathan.Cameron(a)huawei.com>
iio: pressure: zpa2326: Use aligned_s64 for the timestamp
Linggang Zeng <linggang.zeng(a)easystack.cn>
bcache: fix NULL pointer in cache_set_flush()
Yu Kuai <yukuai3(a)huawei.com>
md/md-bitmap: fix dm-raid max_write_behind setting
Thomas Gessler <thomas.gessler(a)brueckmann-gmbh.de>
dmaengine: xilinx_dma: Set dma_device directions
Alexis Czezar Torreno <alexisczezar.torreno(a)analog.com>
hwmon: (pmbus/max34440) Fix support for max34451
Sven Schwermer <sven.schwermer(a)disruptive-technologies.com>
leds: multicolor: Fix intensity setting while SW blinking
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
mfd: max14577: Fix wakeup source leaks on device unbind
Peng Fan <peng.fan(a)nxp.com>
mailbox: Not protect module_put with spin_lock_irqsave
Olga Kornievskaia <okorniev(a)redhat.com>
NFSv4.2: fix listxattr to return selinux security label
Pali Rohár <pali(a)kernel.org>
cifs: Fix cifs_query_path_info() for Windows NT servers
-------------
Diffstat:
Documentation/ABI/testing/sysfs-devices-system-cpu | 2 +
Documentation/ABI/testing/sysfs-driver-ufs | 2 +-
Documentation/admin-guide/hw-vuln/index.rst | 1 +
.../hw-vuln/indirect-target-selection.rst | 156 +++++++++++
.../hw-vuln/processor_mmio_stale_data.rst | 4 +-
Documentation/admin-guide/kernel-parameters.txt | 28 ++
Documentation/devicetree/bindings/serial/8250.yaml | 2 +-
Makefile | 4 +-
arch/arm64/mm/mmu.c | 3 +-
arch/powerpc/include/uapi/asm/ioctls.h | 8 +-
arch/s390/Makefile | 2 +-
arch/s390/purgatory/Makefile | 2 +-
arch/um/drivers/ubd_user.c | 2 +-
arch/um/drivers/vector_kern.c | 42 +--
arch/um/include/asm/asm-prototypes.h | 5 +
arch/x86/Kconfig | 22 +-
arch/x86/entry/entry.S | 8 +-
arch/x86/include/asm/alternative.h | 26 ++
arch/x86/include/asm/cpu.h | 13 +
arch/x86/include/asm/cpufeature.h | 5 +-
arch/x86/include/asm/cpufeatures.h | 14 +-
arch/x86/include/asm/disabled-features.h | 2 +-
arch/x86/include/asm/irqflags.h | 4 +-
arch/x86/include/asm/msr-index.h | 13 +-
arch/x86/include/asm/mwait.h | 19 +-
arch/x86/include/asm/nospec-branch.h | 50 ++--
arch/x86/include/asm/required-features.h | 2 +-
arch/x86/include/asm/text-patching.h | 31 +++
arch/x86/kernel/alternative.c | 308 ++++++++++++++++++++-
arch/x86/kernel/cpu/amd.c | 58 ++++
arch/x86/kernel/cpu/bugs.c | 272 +++++++++++++++++-
arch/x86/kernel/cpu/common.c | 77 +++++-
arch/x86/kernel/cpu/mce/amd.c | 15 +-
arch/x86/kernel/cpu/mce/core.c | 8 +-
arch/x86/kernel/cpu/mce/intel.c | 1 +
arch/x86/kernel/cpu/scattered.c | 1 +
arch/x86/kernel/ftrace.c | 4 +-
arch/x86/kernel/kprobes/core.c | 39 +--
arch/x86/kernel/module.c | 14 +-
arch/x86/kernel/process.c | 15 +-
arch/x86/kernel/static_call.c | 2 +-
arch/x86/kernel/vmlinux.lds.S | 8 +
arch/x86/kvm/cpuid.c | 31 ++-
arch/x86/kvm/cpuid.h | 1 +
arch/x86/kvm/svm/vmenter.S | 3 +
arch/x86/kvm/vmx/vmx.c | 2 +-
arch/x86/kvm/x86.c | 4 +-
arch/x86/lib/retpoline.S | 39 +++
arch/x86/net/bpf_jit_comp.c | 8 +-
arch/x86/um/asm/checksum.h | 3 +
drivers/acpi/acpi_pad.c | 7 +-
drivers/acpi/acpica/dsmethod.c | 7 +
drivers/acpi/battery.c | 19 +-
drivers/ata/pata_cs5536.c | 2 +-
drivers/atm/idt77252.c | 5 +
drivers/base/cpu.c | 15 +
drivers/dma-buf/dma-resv.c | 2 +-
drivers/dma/xilinx/xilinx_dma.c | 2 +
drivers/gpu/drm/amd/amdkfd/kfd_packet_manager_v9.c | 2 +-
drivers/gpu/drm/bridge/cdns-dsi.c | 27 +-
drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4 +
drivers/gpu/drm/exynos/exynos_drm_fimd.c | 12 +
drivers/gpu/drm/i915/gt/intel_ring_submission.c | 3 +-
drivers/gpu/drm/i915/selftests/i915_request.c | 20 +-
drivers/gpu/drm/i915/selftests/mock_request.c | 2 +-
drivers/gpu/drm/tegra/dc.c | 17 +-
drivers/gpu/drm/tegra/hub.c | 4 +-
drivers/gpu/drm/tegra/hub.h | 3 +-
drivers/gpu/drm/udl/udl_drv.c | 2 +-
drivers/gpu/drm/v3d/v3d_drv.h | 7 +
drivers/gpu/drm/v3d/v3d_gem.c | 2 +
drivers/gpu/drm/v3d/v3d_irq.c | 38 ++-
drivers/hid/hid-ids.h | 5 +
drivers/hid/hid-quirks.c | 3 +
drivers/hid/wacom_sys.c | 6 +-
drivers/hv/channel_mgmt.c | 121 +++++---
drivers/hv/hyperv_vmbus.h | 19 +-
drivers/hv/vmbus_drv.c | 2 +-
drivers/hwmon/pmbus/max34440.c | 48 +++-
drivers/i2c/busses/i2c-robotfuzz-osif.c | 6 +
drivers/i2c/busses/i2c-tiny-usb.c | 6 +
drivers/iio/pressure/zpa2326.c | 2 +-
drivers/infiniband/core/iwcm.c | 38 +--
drivers/infiniband/core/iwcm.h | 2 +-
drivers/infiniband/hw/mlx5/counters.c | 2 +-
drivers/infiniband/hw/mlx5/devx.c | 2 +-
drivers/infiniband/hw/mlx5/main.c | 33 +++
drivers/input/joystick/xpad.c | 5 +
drivers/input/keyboard/atkbd.c | 3 +-
drivers/leds/led-class-multicolor.c | 3 +-
drivers/mailbox/mailbox.c | 2 +-
drivers/md/bcache/super.c | 7 +-
drivers/md/dm-raid.c | 2 +-
drivers/md/md-bitmap.c | 2 +-
drivers/md/raid1.c | 1 +
drivers/media/platform/omap3isp/ispccdc.c | 8 +-
drivers/media/platform/omap3isp/ispstat.c | 6 +-
drivers/media/usb/uvc/uvc_ctrl.c | 61 ++--
drivers/mfd/max14577.c | 1 +
drivers/misc/vmw_vmci/vmci_host.c | 9 +-
drivers/mmc/host/mtk-sd.c | 39 ++-
drivers/mmc/host/sdhci.c | 9 +-
drivers/mmc/host/sdhci.h | 16 ++
drivers/net/can/m_can/m_can.c | 2 +-
drivers/net/can/m_can/tcan4x5x.c | 9 +-
drivers/net/ethernet/amd/xgbe/xgbe-common.h | 2 +
drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 9 +
drivers/net/ethernet/amd/xgbe/xgbe.h | 4 +-
drivers/net/ethernet/atheros/atlx/atl1.c | 78 ++++--
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2 +
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +-
drivers/net/ethernet/cisco/enic/enic_main.c | 4 +-
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 141 ++++++++--
drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.h | 20 +-
.../net/ethernet/freescale/dpaa2/dpaa2-ethtool.c | 18 +-
drivers/net/ethernet/freescale/dpaa2/dpni-cmd.h | 6 +-
drivers/net/ethernet/freescale/dpaa2/dpni.c | 2 +
drivers/net/ethernet/freescale/dpaa2/dpni.h | 6 +
drivers/net/ethernet/freescale/enetc/enetc_hw.h | 2 +-
drivers/net/ethernet/sun/niu.c | 31 ++-
drivers/net/ethernet/sun/niu.h | 4 +
drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
drivers/net/phy/microchip.c | 2 +-
drivers/net/phy/smsc.c | 28 +-
drivers/net/usb/qmi_wwan.c | 1 +
drivers/net/wireless/ath/ath6kl/bmi.c | 4 +-
drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6 +-
drivers/pci/controller/cadence/pcie-cadence-ep.c | 5 +-
drivers/pci/controller/pci-hyperv.c | 17 +-
drivers/pinctrl/qcom/pinctrl-msm.c | 20 ++
drivers/platform/mellanox/mlxbf-tmfifo.c | 3 +-
drivers/pwm/pwm-mediatek.c | 15 +-
drivers/regulator/gpio-regulator.c | 4 +-
drivers/rtc/lib_test.c | 2 +
drivers/rtc/rtc-cmos.c | 10 +-
drivers/scsi/qla2xxx/qla_mbx.c | 2 +-
drivers/scsi/qla4xxx/ql4_os.c | 2 +
drivers/scsi/ufs/ufs-sysfs.c | 4 +-
drivers/spi/spi-fsl-dspi.c | 11 +-
drivers/staging/rtl8723bs/core/rtw_security.c | 46 +--
drivers/target/target_core_pr.c | 4 +-
drivers/tty/vt/vt.c | 1 +
drivers/uio/uio_hv_generic.c | 18 +-
drivers/usb/class/cdc-wdm.c | 23 +-
drivers/usb/class/usbtmc.c | 53 ++--
drivers/usb/common/usb-conn-gpio.c | 25 +-
drivers/usb/core/quirks.c | 3 +-
drivers/usb/core/usb.c | 14 +-
drivers/usb/gadget/function/f_tcm.c | 4 +-
drivers/usb/gadget/function/u_serial.c | 6 +-
drivers/usb/host/xhci-dbgcap.c | 4 +
drivers/usb/host/xhci-dbgtty.c | 1 +
drivers/usb/typec/altmodes/displayport.c | 5 +-
drivers/usb/typec/tcpm/tcpci_maxim.c | 20 +-
drivers/vhost/scsi.c | 7 +-
fs/btrfs/inode.c | 36 +--
fs/btrfs/tree-log.c | 4 +-
fs/btrfs/volumes.c | 6 +
fs/ceph/file.c | 2 +-
fs/cifs/misc.c | 8 +
fs/f2fs/super.c | 30 +-
fs/jfs/jfs_dmap.c | 41 +--
fs/namespace.c | 8 +-
fs/nfs/flexfilelayout/flexfilelayout.c | 121 +++++---
fs/nfs/inode.c | 17 +-
fs/nfs/nfs4proc.c | 12 +-
fs/nfs/pnfs.c | 4 +-
fs/overlayfs/util.c | 4 +-
fs/proc/array.c | 6 +-
fs/proc/inode.c | 2 +-
fs/proc/proc_sysctl.c | 18 +-
include/drm/spsc_queue.h | 4 +-
include/linux/cpu.h | 3 +
include/linux/hyperv.h | 2 +
include/linux/ipv6.h | 1 -
include/linux/module.h | 5 +
include/linux/usb/typec_dp.h | 1 +
include/uapi/linux/usb/tmc.h | 2 +
include/uapi/linux/vm_sockets.h | 30 +-
kernel/events/core.c | 2 +-
kernel/rcu/tree.c | 4 +
kernel/rseq.c | 60 +++-
lib/test_objagg.c | 4 +-
net/appletalk/ddp.c | 1 +
net/atm/clip.c | 75 +++--
net/atm/resources.c | 3 +-
net/bluetooth/l2cap_core.c | 9 +-
net/ipv6/ip6_output.c | 9 +-
net/mac80211/rx.c | 4 +
net/mac80211/util.c | 2 +-
net/netlink/af_netlink.c | 90 +++---
net/rose/rose_route.c | 15 +-
net/rxrpc/call_accept.c | 3 +
net/sched/sch_api.c | 42 +--
net/sched/sch_sfq.c | 10 +-
net/tipc/topsrv.c | 2 +
net/vmw_vsock/af_vsock.c | 78 +++++-
net/vmw_vsock/vmci_transport.c | 4 +-
sound/isa/sb/sb16_main.c | 4 +
sound/pci/hda/hda_bind.c | 2 +-
sound/pci/hda/hda_intel.c | 3 +
sound/soc/fsl/fsl_asrc.c | 3 +-
sound/usb/stream.c | 2 +
tools/lib/bpf/btf_dump.c | 3 +
204 files changed, 2750 insertions(+), 821 deletions(-)
1 month, 2 weeks
- 8
- 7
[PATCH v2] wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again
by Muhammad Usama Anjum
Don't deinitialize and reinitialize the HAL helpers. The dma memory is
deallocated and there is high possibility that we'll not be able to get
the same memory allocated from dma when there is high memory pressure.
Tested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6
Fixes: d5c65159f289 ("ath11k: driver for Qualcomm IEEE 802.11ax devices")
Cc: stable(a)vger.kernel.org
Cc: Baochen Qiang <baochen.qiang(a)oss.qualcomm.com>
Signed-off-by: Muhammad Usama Anjum <usama.anjum(a)collabora.com>
---
Changes since v1:
- Cc stable and fix tested on tag
- Clear essential fields as they may have stale data
---
drivers/net/wireless/ath/ath11k/core.c | 6 +-----
drivers/net/wireless/ath/ath11k/hal.c | 12 ++++++++++++
drivers/net/wireless/ath/ath11k/hal.h | 1 +
3 files changed, 14 insertions(+), 5 deletions(-)
diff --git a/drivers/net/wireless/ath/ath11k/core.c b/drivers/net/wireless/ath/ath11k/core.c
index 4488e4cdc5e9e..34b27711ed00f 100644
--- a/drivers/net/wireless/ath/ath11k/core.c
+++ b/drivers/net/wireless/ath/ath11k/core.c
@@ -2213,14 +2213,10 @@ static int ath11k_core_reconfigure_on_crash(struct ath11k_base *ab)
mutex_unlock(&ab->core_lock);
ath11k_dp_free(ab);
- ath11k_hal_srng_deinit(ab);
+ ath11k_hal_srng_clear(ab);
ab->free_vdev_map = (1LL << (ab->num_radios * TARGET_NUM_VDEVS(ab))) - 1;
- ret = ath11k_hal_srng_init(ab);
- if (ret)
- return ret;
-
clear_bit(ATH11K_FLAG_CRASH_FLUSH, &ab->dev_flags);
ret = ath11k_core_qmi_firmware_ready(ab);
diff --git a/drivers/net/wireless/ath/ath11k/hal.c b/drivers/net/wireless/ath/ath11k/hal.c
index b32de563d453a..dafa9bdbb3d32 100644
--- a/drivers/net/wireless/ath/ath11k/hal.c
+++ b/drivers/net/wireless/ath/ath11k/hal.c
@@ -1359,6 +1359,18 @@ void ath11k_hal_srng_deinit(struct ath11k_base *ab)
}
EXPORT_SYMBOL(ath11k_hal_srng_deinit);
+void ath11k_hal_srng_clear(struct ath11k_base *ab)
+{
+ memset(ab->hal.srng_list, 0,
+ sizeof(ab->hal.srng_list));
+ memset(ab->hal.shadow_reg_addr, 0,
+ sizeof(ab->hal.shadow_reg_addr));
+ ab->hal.avail_blk_resource = 0;
+ ab->hal.current_blk_index = 0;
+ ab->hal.num_shadow_reg_configured = 0;
+}
+EXPORT_SYMBOL(ath11k_hal_srng_clear);
+
void ath11k_hal_dump_srng_stats(struct ath11k_base *ab)
{
struct hal_srng *srng;
diff --git a/drivers/net/wireless/ath/ath11k/hal.h b/drivers/net/wireless/ath/ath11k/hal.h
index 601542410c752..839095af9267e 100644
--- a/drivers/net/wireless/ath/ath11k/hal.h
+++ b/drivers/net/wireless/ath/ath11k/hal.h
@@ -965,6 +965,7 @@ int ath11k_hal_srng_setup(struct ath11k_base *ab, enum hal_ring_type type,
struct hal_srng_params *params);
int ath11k_hal_srng_init(struct ath11k_base *ath11k);
void ath11k_hal_srng_deinit(struct ath11k_base *ath11k);
+void ath11k_hal_srng_clear(struct ath11k_base *ab);
void ath11k_hal_dump_srng_stats(struct ath11k_base *ab);
void ath11k_hal_srng_get_shadow_config(struct ath11k_base *ab,
u32 **cfg, u32 *len);
--
2.39.5
1 month, 2 weeks
- 2
- 2
[PATCH v4 1/9] vhost/vsock: Avoid allocating arbitrarily-sized SKBs
by Will Deacon
vhost_vsock_alloc_skb() returns NULL for packets advertising a length
larger than VIRTIO_VSOCK_MAX_PKT_BUF_SIZE in the packet header. However,
this is only checked once the SKB has been allocated and, if the length
in the packet header is zero, the SKB may not be freed immediately.
Hoist the size check before the SKB allocation so that an iovec larger
than VIRTIO_VSOCK_MAX_PKT_BUF_SIZE + the header size is rejected
outright. The subsequent check on the length field in the header can
then simply check that the allocated SKB is indeed large enough to hold
the packet.
Cc: <stable(a)vger.kernel.org>
Fixes: 71dc9ec9ac7d ("virtio/vsock: replace virtio_vsock_pkt with sk_buff")
Reviewed-by: Stefano Garzarella <sgarzare(a)redhat.com>
Signed-off-by: Will Deacon <will(a)kernel.org>
---
drivers/vhost/vsock.c | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/drivers/vhost/vsock.c b/drivers/vhost/vsock.c
index 802153e23073..66a0f060770e 100644
--- a/drivers/vhost/vsock.c
+++ b/drivers/vhost/vsock.c
@@ -344,6 +344,9 @@ vhost_vsock_alloc_skb(struct vhost_virtqueue *vq,
len = iov_length(vq->iov, out);
+ if (len > VIRTIO_VSOCK_MAX_PKT_BUF_SIZE + VIRTIO_VSOCK_SKB_HEADROOM)
+ return NULL;
+
/* len contains both payload and hdr */
skb = virtio_vsock_alloc_skb(len, GFP_KERNEL);
if (!skb)
@@ -367,8 +370,7 @@ vhost_vsock_alloc_skb(struct vhost_virtqueue *vq,
return skb;
/* The pkt is too big or the length in the header is invalid */
- if (payload_len > VIRTIO_VSOCK_MAX_PKT_BUF_SIZE ||
- payload_len + sizeof(*hdr) > len) {
+ if (payload_len + sizeof(*hdr) > len) {
kfree_skb(skb);
return NULL;
}
--
2.50.0.727.gbf7dc18ff4-goog
1 month, 2 weeks
- 3
- 2
[PATCH 6.1 00/89] 6.1.146-rc2 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.1.146 release.
There are 89 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 17 Jul 2025 16:35:20 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.146-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.1.146-rc2
Michael Jeanson <mjeanson(a)efficios.com>
rseq: Fix segfault on registration when rseq_cs is non-zero
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: fix potential use-after-free in oplock/lease break ack
Yeoreum Yun <yeoreum.yun(a)arm.com>
kasan: remove kasan_find_vm_area() to prevent possible deadlock
Jack Wang <jinpu.wang(a)ionos.com>
x86: Fix X86_FEATURE_VERW_CLEAR definition
Jann Horn <jannh(a)google.com>
x86/mm: Disable hugetlb page table sharing on 32-bit
Dongli Zhang <dongli.zhang(a)oracle.com>
vhost-scsi: protect vq->log_used with vq->mutex
Hans de Goede <hdegoede(a)redhat.com>
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com>
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Zhang Heng <zhangheng(a)kylinos.cn>
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
Nicolas Pitre <npitre(a)baylibre.com>
vt: add missing notification when switching back to text mode
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix assertion when building free space tree
Akira Inoue <niyarium(a)gmail.com>
HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
Xiaowei Li <xiaowei.li(a)simcom.com>
net: usb: qmi_wwan: add SIMCom 8230C composition
Yasmin Fitzgerald <sunoflife1.git(a)gmail.com>
ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
Yuzuru10 <yuzuru_10(a)proton.me>
ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
Tiwei Bie <tiwei.btw(a)antgroup.com>
um: vector: Reduce stack usage in vector_eth_configure()
Thomas Fourier <fourier.thomas(a)gmail.com>
atm: idt77252: Add missing `dma_map_error()`
Somnath Kotur <somnath.kotur(a)broadcom.com>
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Fix DCB ETS validation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
Sean Nyekjaer <sean(a)geanix.com>
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
Oleksij Rempel <linux(a)rempel-privat.de>
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
Mingming Cao <mmc(a)linux.ibm.com>
ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
Kito Xu <veritas501(a)foxmail.com>
net: appletalk: Fix device refcount leak in atrtr_create()
Eric Dumazet <edumazet(a)google.com>
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
Chao Yu <chao(a)kernel.org>
erofs: fix to add missing tracepoint in erofs_read_folio()
Gao Xiang <xiang(a)kernel.org>
erofs: adapt folios for z_erofs_read_folio()
Gao Xiang <xiang(a)kernel.org>
erofs: avoid on-stack pagepool directly passed by arguments
Gao Xiang <xiang(a)kernel.org>
erofs: allocate extra bvec pages directly instead of retrying
Yue Hu <huyue2(a)coolpad.com>
erofs: clean up z_erofs_pcluster_readmore()
Yue Hu <huyue2(a)coolpad.com>
erofs: remove the member readahead from struct z_erofs_decompress_frontend
Zheng Qixing <zhengqixing(a)huawei.com>
nbd: fix uaf in nbd_genl_connect() error path
Nigel Croxon <ncroxon(a)redhat.com>
raid10: cleanup memleak at raid10_make_request
Wang Jinchao <wangjinchao600(a)gmail.com>
md/raid1: Fix stack memory use after return in raid1_reshape
Mikko Perttunen <mperttunen(a)nvidia.com>
drm/tegra: nvdec: Fix dma_alloc_coherent error check
Daniil Dulov <d.dulov(a)aladdin.ru>
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
Zhang Rui <rui.zhang(a)intel.com>
platform/x86: think-lmi: Fix sysfs group cleanup
Kuen-Han Tsai <khtsai(a)google.com>
usb: dwc3: Abort suspend on soft disconnect failure
Pawel Laszczak <pawell(a)cadence.com>
usb: cdnsp: Fix issue with CV Bad Descriptor test
Lee Jones <lee(a)kernel.org>
usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
Pawel Laszczak <pawell(a)cadence.com>
usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
Nilton Perim Neto <niltonperimneto(a)gmail.com>
Input: xpad - support Acer NGR 200 Controller
Raju Rangoju <Raju.Rangoju(a)amd.com>
usb: xhci: quirk for data loss in ISOC transfers
Basavaraj Natikar <Basavaraj.Natikar(a)amd.com>
xhci: Allow RPM on the USB controller (1022:43f7) by default
Filipe Manana <fdmanana(a)suse.com>
btrfs: propagate last_unlink_trans earlier when doing a rmdir
Shivank Garg <shivankg(a)amd.com>
fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
Jakub Kicinski <kuba(a)kernel.org>
netlink: make sure we allow at least one dump skb
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix rmem check in netlink_broadcast_deliver().
Al Viro <viro(a)zeniv.linux.org.uk>
ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
Stefan Metzmacher <metze(a)samba.org>
smb: server: make use of rdma_destroy_qp()
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Ensure to disable clocks in error path
Wei Yang <richard.weiyang(a)gmail.com>
maple_tree: fix mt_destroy_walk() on root leaf node
Achill Gilgenast <fossdd(a)pwned.life>
kallsyms: fix build without execinfo
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "ACPI: battery: negate current when discharging"
Kuen-Han Tsai <khtsai(a)google.com>
usb: gadget: u_serial: Fix race condition in TTY wakeup
Simona Vetter <simona.vetter(a)ffwll.ch>
drm/gem: Fix race in drm_gem_handle_create_tail()
Christian König <christian.koenig(a)amd.com>
drm/ttm: fix error handling in ttm_buffer_object_transfer
Matthew Brost <matthew.brost(a)intel.com>
drm/sched: Increment job count before swapping tail spsc queue
Mathy Vanhoef <Mathy.Vanhoef(a)kuleuven.be>
wifi: prevent A-MSDU attacks in mesh networks
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
Håkon Bugge <haakon.bugge(a)oracle.com>
md/md-bitmap: fix GPF in bitmap_get_stats()
Guillaume Nault <gnault(a)redhat.com>
gre: Fix IPv6 multicast route creation.
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
David Woodhouse <dwmw(a)amazon.co.uk>
KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
JP Kobryn <inwardvessel(a)gmail.com>
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce: Don't remove sysfs if thresholding sysfs init fails
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Fix threshold limit reset
Dan Carpenter <dan.carpenter(a)linaro.org>
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
Alexey Dobriyan <adobriyan(a)gmail.com>
x86/boot: Compile boot code with -std=gnu11 too
David Howells <dhowells(a)redhat.com>
rxrpc: Fix oops due to non-existence of prealloc backlog struct
Liam R. Howlett <Liam.Howlett(a)oracle.com>
maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
Victor Nogueira <victor(a)mojatatu.com>
net/sched: Abort __tc_modify_qdisc if parent class does not exist
Yue Haibing <yuehaibing(a)huawei.com>
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix infinite recursive call of clip_push().
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix memory leak of struct clip_vcc.
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
Oleksij Rempel <linux(a)rempel-privat.de>
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
Oleksij Rempel <linux(a)rempel-privat.de>
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_* TOCTOU
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_{g2h,h2g} TOCTOU
Kuniyuki Iwashima <kuniyu(a)google.com>
tipc: Fix use-after-free in tipc_conn_close().
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix wraparounds of sk->sk_rmem_alloc.
Al Viro <viro(a)zeniv.linux.org.uk>
fix proc_sys_compare() handling of in-lookup dentries
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_sync: Fix not disabling advertising instance
Peter Zijlstra <peterz(a)infradead.org>
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
Rong Zhang <i(a)rong.moe>
platform/x86: ideapad-laptop: use usleep_range() for EC polling
Kaustabh Chakraborty <kauschluss(a)disroot.org>
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
-------------
Diffstat:
Makefile | 4 +-
arch/um/drivers/vector_kern.c | 42 +--
arch/x86/Kconfig | 2 +-
arch/x86/Makefile | 2 +-
arch/x86/include/asm/cpufeatures.h | 2 +-
arch/x86/kernel/cpu/mce/amd.c | 15 +-
arch/x86/kernel/cpu/mce/core.c | 8 +-
arch/x86/kernel/cpu/mce/intel.c | 1 +
arch/x86/kvm/svm/sev.c | 4 +
arch/x86/kvm/xen.c | 15 +-
drivers/acpi/battery.c | 19 +-
drivers/atm/idt77252.c | 5 +
drivers/block/nbd.c | 6 +-
drivers/char/ipmi/ipmi_msghandler.c | 3 +-
drivers/gpu/drm/drm_gem.c | 10 +-
drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4 +
drivers/gpu/drm/tegra/nvdec.c | 6 +-
drivers/gpu/drm/ttm/ttm_bo_util.c | 13 +-
drivers/hid/hid-ids.h | 6 +
drivers/hid/hid-lenovo.c | 8 +
drivers/hid/hid-multitouch.c | 8 +-
drivers/hid/hid-quirks.c | 3 +
drivers/input/joystick/xpad.c | 2 +
drivers/input/keyboard/atkbd.c | 3 +-
drivers/md/md-bitmap.c | 3 +-
drivers/md/raid1.c | 1 +
drivers/md/raid10.c | 10 +-
drivers/net/can/m_can/m_can.c | 2 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2 +
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +-
drivers/net/ethernet/ibm/ibmvnic.h | 8 +-
drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
drivers/net/phy/microchip.c | 2 +-
drivers/net/phy/smsc.c | 28 +-
drivers/net/usb/qmi_wwan.c | 1 +
drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6 +-
drivers/pinctrl/qcom/pinctrl-msm.c | 20 ++
drivers/platform/x86/ideapad-laptop.c | 19 +-
drivers/powercap/intel_rapl_common.c | 22 +-
drivers/pwm/pwm-mediatek.c | 13 +-
drivers/tty/vt/vt.c | 1 +
drivers/usb/cdns3/cdnsp-debug.h | 358 +++++++++++++-------------
drivers/usb/cdns3/cdnsp-ep0.c | 18 +-
drivers/usb/cdns3/cdnsp-gadget.c | 6 +-
drivers/usb/cdns3/cdnsp-gadget.h | 11 +-
drivers/usb/cdns3/cdnsp-ring.c | 27 +-
drivers/usb/dwc3/core.c | 9 +-
drivers/usb/dwc3/gadget.c | 22 +-
drivers/usb/gadget/function/u_serial.c | 6 +-
drivers/usb/host/xhci-mem.c | 4 +
drivers/usb/host/xhci-pci.c | 30 ++-
drivers/usb/host/xhci.h | 1 +
drivers/vhost/scsi.c | 7 +-
fs/anon_inodes.c | 23 +-
fs/btrfs/free-space-tree.c | 16 +-
fs/btrfs/inode.c | 28 +-
fs/erofs/data.c | 2 +
fs/erofs/zdata.c | 124 ++++-----
fs/proc/inode.c | 2 +-
fs/proc/proc_sysctl.c | 18 +-
fs/smb/server/smb2pdu.c | 29 +--
fs/smb/server/transport_rdma.c | 5 +-
fs/smb/server/vfs.c | 1 +
include/drm/drm_file.h | 3 +
include/drm/spsc_queue.h | 4 +-
include/linux/fs.h | 2 +
include/net/netfilter/nf_flow_table.h | 2 +-
include/trace/events/erofs.h | 16 +-
kernel/events/core.c | 2 +-
kernel/rseq.c | 60 ++++-
lib/maple_tree.c | 7 +-
mm/kasan/report.c | 13 +-
mm/secretmem.c | 11 +-
net/appletalk/ddp.c | 1 +
net/atm/clip.c | 64 +++--
net/bluetooth/hci_sync.c | 2 +-
net/ipv6/addrconf.c | 9 +-
net/netlink/af_netlink.c | 90 ++++---
net/rxrpc/call_accept.c | 3 +
net/sched/sch_api.c | 23 +-
net/tipc/topsrv.c | 2 +
net/vmw_vsock/af_vsock.c | 57 +++-
net/wireless/util.c | 52 +++-
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/amd/yc/acp6x-mach.c | 7 +
sound/soc/fsl/fsl_asrc.c | 3 +-
tools/include/linux/kallsyms.h | 4 +
87 files changed, 924 insertions(+), 594 deletions(-)
1 month, 2 weeks
- 10
- 9
[PATCH 6.6 000/111] 6.6.99-rc2 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.6.99 release.
There are 111 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 17 Jul 2025 16:35:12 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.99-rc2…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.6.99-rc2
Michael Jeanson <mjeanson(a)efficios.com>
rseq: Fix segfault on registration when rseq_cs is non-zero
Lukas Wunner <lukas(a)wunner.de>
crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: fix potential use-after-free in oplock/lease break ack
Yeoreum Yun <yeoreum.yun(a)arm.com>
kasan: remove kasan_find_vm_area() to prevent possible deadlock
Paulo Alcantara <pc(a)manguebit.com>
smb: client: fix potential race in cifs_put_tcon()
Willem de Bruijn <willemb(a)google.com>
selftests/bpf: adapt one more case in test_lru_map to the new target_free
Hans de Goede <hdegoede(a)redhat.com>
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com>
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Zhang Heng <zhangheng(a)kylinos.cn>
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
Willem de Bruijn <willemb(a)google.com>
bpf: Adjust free target to avoid global starvation of LRU map
Nicolas Pitre <npitre(a)baylibre.com>
vt: add missing notification when switching back to text mode
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix assertion when building free space tree
Long Li <longli(a)microsoft.com>
net: mana: Record doorbell physical address in PF mode
Akira Inoue <niyarium(a)gmail.com>
HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
Xiaowei Li <xiaowei.li(a)simcom.com>
net: usb: qmi_wwan: add SIMCom 8230C composition
Yasmin Fitzgerald <sunoflife1.git(a)gmail.com>
ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
Yuzuru10 <yuzuru_10(a)proton.me>
ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
Fengnan Chang <changfengnan(a)bytedance.com>
io_uring: make fallocate be hashed work
Tiwei Bie <tiwei.btw(a)antgroup.com>
um: vector: Reduce stack usage in vector_eth_configure()
Thomas Fourier <fourier.thomas(a)gmail.com>
atm: idt77252: Add missing `dma_map_error()`
Ronnie Sahlberg <rsahlberg(a)whamcloud.com>
ublk: sanity check add_dev input for underflow
Somnath Kotur <somnath.kotur(a)broadcom.com>
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Fix DCB ETS validation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
Sean Nyekjaer <sean(a)geanix.com>
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
Mingming Cao <mmc(a)linux.ibm.com>
ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
Kito Xu <veritas501(a)foxmail.com>
net: appletalk: Fix device refcount leak in atrtr_create()
Eric Dumazet <edumazet(a)google.com>
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
Zheng Qixing <zhengqixing(a)huawei.com>
nbd: fix uaf in nbd_genl_connect() error path
Nigel Croxon <ncroxon(a)redhat.com>
raid10: cleanup memleak at raid10_make_request
Wang Jinchao <wangjinchao600(a)gmail.com>
md/raid1: Fix stack memory use after return in raid1_reshape
Mikko Perttunen <mperttunen(a)nvidia.com>
drm/tegra: nvdec: Fix dma_alloc_coherent error check
Daniil Dulov <d.dulov(a)aladdin.ru>
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
Shyam Prasad N <sprasad(a)microsoft.com>
cifs: all initializations for tcon should happen in tcon_info_alloc
Paulo Alcantara <pc(a)manguebit.com>
smb: client: fix DFS interlink failover
Paulo Alcantara <pc(a)manguebit.com>
smb: client: avoid unnecessary reconnects when refreshing referrals
Kuen-Han Tsai <khtsai(a)google.com>
usb: dwc3: Abort suspend on soft disconnect failure
Pawel Laszczak <pawell(a)cadence.com>
usb: cdnsp: Fix issue with CV Bad Descriptor test
Lee Jones <lee(a)kernel.org>
usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
Pawel Laszczak <pawell(a)cadence.com>
usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix inode lookup error handling during log replay
Filipe Manana <fdmanana(a)suse.com>
btrfs: return a btrfs_inode from btrfs_iget_logging()
Filipe Manana <fdmanana(a)suse.com>
btrfs: remove redundant root argument from fixup_inode_link_count()
Filipe Manana <fdmanana(a)suse.com>
btrfs: remove redundant root argument from btrfs_update_inode_fallback()
Filipe Manana <fdmanana(a)suse.com>
btrfs: remove noinline from btrfs_update_inode()
Jakub Kicinski <kuba(a)kernel.org>
netlink: make sure we allow at least one dump skb
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix rmem check in netlink_broadcast_deliver().
Chao Yu <chao(a)kernel.org>
erofs: fix to add missing tracepoint in erofs_read_folio()
Al Viro <viro(a)zeniv.linux.org.uk>
ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
Stefan Metzmacher <metze(a)samba.org>
smb: server: make use of rdma_destroy_qp()
Jann Horn <jannh(a)google.com>
x86/mm: Disable hugetlb page table sharing on 32-bit
Mikhail Paulyshka <me(a)mixaill.net>
x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Ensure to disable clocks in error path
Alexander Gordeev <agordeev(a)linux.ibm.com>
mm/vmalloc: leave lazy MMU mode on PTE mapping error
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: fix interrupts.py after maple tree conversion
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: de-reference per-CPU MCE interrupts
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: fix interrupts display after MCP on x86
Baolin Wang <baolin.wang(a)linux.alibaba.com>
mm: fix the inaccurate memory statistics issue for users
Wei Yang <richard.weiyang(a)gmail.com>
maple_tree: fix mt_destroy_walk() on root leaf node
Achill Gilgenast <fossdd(a)pwned.life>
kallsyms: fix build without execinfo
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "ACPI: battery: negate current when discharging"
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/framebuffer: Acquire internal references on GEM handles
Kuen-Han Tsai <khtsai(a)google.com>
Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
Kuen-Han Tsai <khtsai(a)google.com>
usb: gadget: u_serial: Fix race condition in TTY wakeup
Simona Vetter <simona.vetter(a)ffwll.ch>
drm/gem: Fix race in drm_gem_handle_create_tail()
Christian König <christian.koenig(a)amd.com>
drm/ttm: fix error handling in ttm_buffer_object_transfer
Matthew Brost <matthew.brost(a)intel.com>
drm/sched: Increment job count before swapping tail spsc queue
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/gem: Acquire references on GEM handles for framebuffers
Mathy Vanhoef <Mathy.Vanhoef(a)kuleuven.be>
wifi: prevent A-MSDU attacks in mesh networks
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
Håkon Bugge <haakon.bugge(a)oracle.com>
md/md-bitmap: fix GPF in bitmap_get_stats()
Guillaume Nault <gnault(a)redhat.com>
gre: Fix IPv6 multicast route creation.
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
David Woodhouse <dwmw(a)amazon.co.uk>
KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
JP Kobryn <inwardvessel(a)gmail.com>
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce: Don't remove sysfs if thresholding sysfs init fails
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Fix threshold limit reset
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Add default names for MCA banks and blocks
Dan Carpenter <dan.carpenter(a)linaro.org>
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
David Howells <dhowells(a)redhat.com>
rxrpc: Fix oops due to non-existence of prealloc backlog struct
Christian Eggers <ceggers(a)arri.de>
Bluetooth: HCI: Set extended advertising data synchronously
Leo Yan <leo.yan(a)arm.com>
perf: build: Setup PKG_CONFIG_LIBDIR for cross compilation
Liam R. Howlett <Liam.Howlett(a)oracle.com>
maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
David Howells <dhowells(a)redhat.com>
rxrpc: Fix bug due to prealloc collision
Victor Nogueira <victor(a)mojatatu.com>
net/sched: Abort __tc_modify_qdisc if parent class does not exist
Yue Haibing <yuehaibing(a)huawei.com>
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix infinite recursive call of clip_push().
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix memory leak of struct clip_vcc.
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Force predictable MDI-X state on LAN87xx
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
EricChan <chenchuangyu(a)xiaomi.com>
net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_* TOCTOU
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_{g2h,h2g} TOCTOU
Jiayuan Chen <jiayuan.chen(a)linux.dev>
tcp: Correct signedness in skb remaining space calculation
Kuniyuki Iwashima <kuniyu(a)google.com>
tipc: Fix use-after-free in tipc_conn_close().
Stefano Garzarella <sgarzare(a)redhat.com>
vsock: fix `vsock_proto` declaration
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix wraparounds of sk->sk_rmem_alloc.
Al Viro <viro(a)zeniv.linux.org.uk>
fix proc_sys_compare() handling of in-lookup dentries
Mario Limonciello <mario.limonciello(a)amd.com>
pinctrl: amd: Clear GPIO debounce for suspend
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_sync: Fix not disabling advertising instance
Richard Fitzgerald <rf(a)opensource.cirrus.com>
ASoC: cs35l56: probe() should fail if the device ID is not recognized
Peter Zijlstra <peterz(a)infradead.org>
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Luo Gengkun <luogengkun(a)huaweicloud.com>
perf/core: Fix the WARN_ON_ONCE is out of lock protected region
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
Kaustabh Chakraborty <kauschluss(a)disroot.org>
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
Linus Torvalds <torvalds(a)linux-foundation.org>
eventpoll: don't decrement ep refcount while still holding the ep mutex
-------------
Diffstat:
Documentation/bpf/map_hash.rst | 8 +-
Documentation/bpf/map_lru_hash_update.dot | 6 +-
Makefile | 4 +-
arch/um/drivers/vector_kern.c | 42 +--
arch/x86/Kconfig | 2 +-
arch/x86/include/asm/msr-index.h | 1 +
arch/x86/kernel/cpu/amd.c | 7 +
arch/x86/kernel/cpu/mce/amd.c | 28 +-
arch/x86/kernel/cpu/mce/core.c | 8 +-
arch/x86/kernel/cpu/mce/intel.c | 1 +
arch/x86/kvm/svm/sev.c | 4 +
arch/x86/kvm/xen.c | 15 +-
crypto/ecc.c | 2 +-
drivers/acpi/battery.c | 19 +-
drivers/atm/idt77252.c | 5 +
drivers/block/nbd.c | 6 +-
drivers/block/ublk_drv.c | 3 +-
drivers/char/ipmi/ipmi_msghandler.c | 3 +-
drivers/gpu/drm/drm_framebuffer.c | 31 +-
drivers/gpu/drm/drm_gem.c | 74 ++++-
drivers/gpu/drm/drm_internal.h | 2 +
drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4 +
drivers/gpu/drm/tegra/nvdec.c | 6 +-
drivers/gpu/drm/ttm/ttm_bo_util.c | 13 +-
drivers/hid/hid-ids.h | 6 +
drivers/hid/hid-lenovo.c | 8 +
drivers/hid/hid-multitouch.c | 8 +-
drivers/hid/hid-quirks.c | 3 +
drivers/input/keyboard/atkbd.c | 3 +-
drivers/md/md-bitmap.c | 3 +-
drivers/md/raid1.c | 1 +
drivers/md/raid10.c | 10 +-
drivers/net/can/m_can/m_can.c | 2 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2 +
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +-
drivers/net/ethernet/ibm/ibmvnic.h | 8 +-
drivers/net/ethernet/microsoft/mana/gdma_main.c | 3 +
drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c | 24 +-
drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
drivers/net/phy/microchip.c | 2 +-
drivers/net/phy/smsc.c | 57 +++-
drivers/net/usb/qmi_wwan.c | 1 +
drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6 +-
drivers/pinctrl/pinctrl-amd.c | 11 +
drivers/pinctrl/qcom/pinctrl-msm.c | 20 ++
drivers/pwm/pwm-mediatek.c | 13 +-
drivers/tty/vt/vt.c | 1 +
drivers/usb/cdns3/cdnsp-debug.h | 358 ++++++++++-----------
drivers/usb/cdns3/cdnsp-ep0.c | 18 +-
drivers/usb/cdns3/cdnsp-gadget.c | 6 +-
drivers/usb/cdns3/cdnsp-gadget.h | 11 +-
drivers/usb/cdns3/cdnsp-ring.c | 27 +-
drivers/usb/dwc3/core.c | 9 +-
drivers/usb/dwc3/gadget.c | 22 +-
drivers/usb/gadget/function/u_serial.c | 12 +-
fs/btrfs/btrfs_inode.h | 2 +-
fs/btrfs/free-space-tree.c | 16 +-
fs/btrfs/inode.c | 18 +-
fs/btrfs/transaction.c | 2 +-
fs/btrfs/tree-log.c | 331 +++++++++++--------
fs/erofs/data.c | 2 +
fs/eventpoll.c | 12 +-
fs/proc/inode.c | 2 +-
fs/proc/proc_sysctl.c | 18 +-
fs/proc/task_mmu.c | 14 +-
fs/smb/client/cifsglob.h | 3 +
fs/smb/client/cifsproto.h | 13 +-
fs/smb/client/connect.c | 47 ++-
fs/smb/client/dfs.c | 73 ++---
fs/smb/client/dfs.h | 42 ++-
fs/smb/client/dfs_cache.c | 198 +++++++-----
fs/smb/client/fs_context.h | 1 +
fs/smb/client/misc.c | 9 +
fs/smb/client/namespace.c | 2 +-
fs/smb/server/smb2pdu.c | 29 +-
fs/smb/server/transport_rdma.c | 5 +-
fs/smb/server/vfs.c | 1 +
include/drm/drm_file.h | 3 +
include/drm/drm_framebuffer.h | 7 +
include/drm/spsc_queue.h | 4 +-
include/linux/math.h | 12 +
include/linux/mm.h | 5 +
include/net/af_vsock.h | 2 +-
include/net/netfilter/nf_flow_table.h | 2 +-
io_uring/opdef.c | 1 +
kernel/bpf/bpf_lru_list.c | 9 +-
kernel/bpf/bpf_lru_list.h | 1 +
kernel/events/core.c | 6 +-
kernel/rseq.c | 60 +++-
lib/maple_tree.c | 14 +-
mm/kasan/report.c | 13 +-
mm/vmalloc.c | 22 +-
net/appletalk/ddp.c | 1 +
net/atm/clip.c | 64 +++-
net/bluetooth/hci_event.c | 39 +--
net/bluetooth/hci_sync.c | 215 ++++++++-----
net/ipv4/tcp.c | 2 +-
net/ipv6/addrconf.c | 9 +-
net/netlink/af_netlink.c | 90 +++---
net/rxrpc/call_accept.c | 4 +
net/sched/sch_api.c | 23 +-
net/tipc/topsrv.c | 2 +
net/vmw_vsock/af_vsock.c | 57 +++-
net/wireless/util.c | 52 ++-
scripts/gdb/linux/constants.py.in | 7 +
scripts/gdb/linux/interrupts.py | 16 +-
scripts/gdb/linux/mapletree.py | 252 +++++++++++++++
scripts/gdb/linux/xarray.py | 28 ++
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/amd/yc/acp6x-mach.c | 7 +
sound/soc/codecs/cs35l56-shared.c | 2 +-
sound/soc/fsl/fsl_asrc.c | 3 +-
tools/arch/x86/include/asm/msr-index.h | 1 +
tools/build/feature/Makefile | 25 +-
tools/include/linux/kallsyms.h | 4 +
tools/perf/Makefile.perf | 27 +-
tools/testing/selftests/bpf/test_lru_map.c | 105 +++---
117 files changed, 1948 insertions(+), 1042 deletions(-)
From gregkh(a)linuxfoundation.org Tue Jul 15 18:35:42 2025
Message-ID: <20250715163542.121531643(a)linuxfoundation.org>
User-Agent: quilt/0.68
Date: Tue, 15 Jul 2025 18:35:43 +0200
From: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
To: stable(a)vger.kernel.org
Cc: patches(a)lists.linux.dev, linux-kernel(a)vger.kernel.org, torvalds(a)linux-foundation.org, akpm(a)linux-foundation.org, linux(a)roeck-us.net, shuah(a)kernel.org, patches(a)kernelci.org, lkft-triage(a)lists.linaro.org, pavel(a)denx.de, jonathanh(a)nvidia.com, f.fainelli(a)gmail.com, sudipm.mukherjee(a)gmail.com, srw(a)sladewatkins.net, rwarsow(a)gmx.de, conor(a)kernel.org, hargar(a)microsoft.com, broonie(a)kernel.org,
Jann Horn <jannh(a)google.com>,
Alexander Viro <viro(a)zeniv.linux.org.uk>,
Christian Brauner <brauner(a)kernel.org>,
Jan Kara <jack(a)suse.cz>,
Linus Torvalds <torvalds(a)linux-foundation.org>
X-stable: review
X-Patchwork-Hint: ignore
Subject: [PATCH 6.6 001/111] eventpoll: dont decrement ep refcount while still holding the ep mutex
MIME-Version: 1.0
6.6-stable review patch. If anyone has any objections, please let me know.
------------------
From: Linus Torvalds <torvalds(a)linux-foundation.org>
commit 8c2e52ebbe885c7eeaabd3b7ddcdc1246fc400d2 upstream.
Jann Horn points out that epoll is decrementing the ep refcount and then
doing a
mutex_unlock(&ep->mtx);
afterwards. That's very wrong, because it can lead to a use-after-free.
That pattern is actually fine for the very last reference, because the
code in question will delay the actual call to "ep_free(ep)" until after
it has unlocked the mutex.
But it's wrong for the much subtler "next to last" case when somebody
*else* may also be dropping their reference and free the ep while we're
still using the mutex.
Note that this is true even if that other user is also using the same ep
mutex: mutexes, unlike spinlocks, can not be used for object ownership,
even if they guarantee mutual exclusion.
A mutex "unlock" operation is not atomic, and as one user is still
accessing the mutex as part of unlocking it, another user can come in
and get the now released mutex and free the data structure while the
first user is still cleaning up.
See our mutex documentation in Documentation/locking/mutex-design.rst,
in particular the section [1] about semantics:
"mutex_unlock() may access the mutex structure even after it has
internally released the lock already - so it's not safe for
another context to acquire the mutex and assume that the
mutex_unlock() context is not using the structure anymore"
So if we drop our ep ref before the mutex unlock, but we weren't the
last one, we may then unlock the mutex, another user comes in, drops
_their_ reference and releases the 'ep' as it now has no users - all
while the mutex_unlock() is still accessing it.
Fix this by simply moving the ep refcount dropping to outside the mutex:
the refcount itself is atomic, and doesn't need mutex protection (that's
the whole _point_ of refcounts: unlike mutexes, they are inherently
about object lifetimes).
Reported-by: Jann Horn <jannh(a)google.com>
Link: https://docs.kernel.org/locking/mutex-design.html#semantics [1]
Cc: Alexander Viro <viro(a)zeniv.linux.org.uk>
Cc: Christian Brauner <brauner(a)kernel.org>
Cc: Jan Kara <jack(a)suse.cz>
Signed-off-by: Linus Torvalds <torvalds(a)linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
---
fs/eventpoll.c | 12 +++++-------
1 file changed, 5 insertions(+), 7 deletions(-)
--- a/fs/eventpoll.c
+++ b/fs/eventpoll.c
@@ -772,7 +772,7 @@ static bool __ep_remove(struct eventpoll
call_rcu(&epi->rcu, epi_rcu_free);
percpu_counter_dec(&ep->user->epoll_watches);
- return ep_refcount_dec_and_test(ep);
+ return true;
}
/*
@@ -780,14 +780,14 @@ static bool __ep_remove(struct eventpoll
*/
static void ep_remove_safe(struct eventpoll *ep, struct epitem *epi)
{
- WARN_ON_ONCE(__ep_remove(ep, epi, false));
+ if (__ep_remove(ep, epi, false))
+ WARN_ON_ONCE(ep_refcount_dec_and_test(ep));
}
static void ep_clear_and_put(struct eventpoll *ep)
{
struct rb_node *rbp, *next;
struct epitem *epi;
- bool dispose;
/* We need to release all tasks waiting for these file */
if (waitqueue_active(&ep->poll_wait))
@@ -820,10 +820,8 @@ static void ep_clear_and_put(struct even
cond_resched();
}
- dispose = ep_refcount_dec_and_test(ep);
mutex_unlock(&ep->mtx);
-
- if (dispose)
+ if (ep_refcount_dec_and_test(ep))
ep_free(ep);
}
@@ -1003,7 +1001,7 @@ again:
dispose = __ep_remove(ep, epi, true);
mutex_unlock(&ep->mtx);
- if (dispose)
+ if (dispose && ep_refcount_dec_and_test(ep))
ep_free(ep);
goto again;
}
1 month, 2 weeks
- 10
- 9
[PATCH 5.10 000/355] 5.10.239-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.10.239 release.
There are 355 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 25 Jun 2025 13:05:51 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.239-r…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 5.10.239-rc1
Tengda Wu <wutengda(a)huaweicloud.com>
arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
Peter Zijlstra <peterz(a)infradead.org>
perf: Fix sample vs do_exit()
Aaron Lu <ziqianlu(a)bytedance.com>
Revert "bpf: allow precision tracking for programs with subprogs"
Aaron Lu <ziqianlu(a)bytedance.com>
Revert "bpf: stop setting precise in current state"
Aaron Lu <ziqianlu(a)bytedance.com>
Revert "bpf: aggressively forget precise markings during state checkpointing"
Aaron Lu <ziqianlu(a)bytedance.com>
Revert "selftests/bpf: make test_align selftest more robust"
Heiko Carstens <hca(a)linux.ibm.com>
s390/pci: Fix __pcilg_mio_inuser() inline assembly
David Gow <davidgow(a)google.com>
rtc: test: Fix invalid format specifier.
Eddie James <eajames(a)linux.ibm.com>
hwmon: (occ) Fix P10 VRM temp sensors
Gavin Guo <gavinguo(a)igalia.com>
mm/huge_memory: fix dereferencing invalid pmd migration entry
Octavian Purdila <tavip(a)google.com>
net_sched: sch_sfq: move the limit validation
Octavian Purdila <tavip(a)google.com>
net_sched: sch_sfq: use a temporary work area for validating configuration
Octavian Purdila <tavip(a)google.com>
net_sched: sch_sfq: don't allow 1 packet limit
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_sfq: handle bigger packets
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_sfq: annotate data-races around q->perturb_period
Alexandre Mergnat <amergnat(a)baylibre.com>
rtc: Make rtc_time64_to_tm() support dates before 1970
Cassio Neri <cassio.neri(a)gmail.com>
rtc: Improve performance of rtc_time64_to_tm(). Add tests.
Paul Chaignon <paul.chaignon(a)gmail.com>
bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
Paul Chaignon <paul.chaignon(a)gmail.com>
net: Fix checksum update for ILA adj-transport
Eliav Farber <farbere(a)amazon.com>
net/ipv4: fix type mismatch in inet_ehash_locks_alloc() causing build failure
James Morse <james.morse(a)arm.com>
arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
James Morse <james.morse(a)arm.com>
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
James Morse <james.morse(a)arm.com>
arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
Liu Song <liusong(a)linux.alibaba.com>
arm64: spectre: increase parameters that can be used to turn off bhb mitigation individually
James Morse <james.morse(a)arm.com>
arm64: proton-pack: Expose whether the branchy loop k value
Will Deacon <will(a)kernel.org>
arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
Douglas Anderson <dianders(a)chromium.org>
arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
Douglas Anderson <dianders(a)chromium.org>
arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
Douglas Anderson <dianders(a)chromium.org>
arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
James Morse <james.morse(a)arm.com>
arm64: proton-pack: Expose whether the platform is mitigated by firmware
James Morse <james.morse(a)arm.com>
arm64: insn: Add support for encoding DSB
Hou Tao <houtao1(a)huawei.com>
arm64: insn: add encoders for atomic operations
Hou Tao <houtao1(a)huawei.com>
arm64: move AARCH64_BREAK_FAULT into insn-def.h
Julien Thierry <jthierry(a)redhat.com>
arm64: insn: Add barrier encodings
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
serial: sh-sci: Increment the runtime usage counter for the earlycon device
Geert Uytterhoeven <geert+renesas(a)glider.be>
ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
Colin Foster <colin.foster(a)in-advantage.com>
ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
Shengyu Qu <wiagn233(a)outlook.com>
ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
Eric Dumazet <edumazet(a)google.com>
net: atm: fix /proc/net/atm/lec handling
Eric Dumazet <edumazet(a)google.com>
net: atm: add lec_mutex
Kuniyuki Iwashima <kuniyu(a)google.com>
calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
Haixia Qu <hxqu(a)hillstonenet.com>
tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
Neal Cardwell <ncardwell(a)google.com>
tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: atmtcp: Free invalid length skb in atmtcp_c_send().
Kuniyuki Iwashima <kuniyu(a)google.com>
mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
Dmitry Antipov <dmantipov(a)yandex.ru>
wifi: carl9170: do not ping device which has failed to load firmware
Krishna Kumar <krikku(a)gmail.com>
net: ice: Perform accurate aRFS flow match
Justin Sanders <jsanders.devel(a)gmail.com>
aoe: clean device rq_list in aoedev_downdev()
Simon Horman <horms(a)kernel.org>
pldmfw: Select CRC32 when PLDMFW is selected
Arnd Bergmann <arnd(a)arndb.de>
hwmon: (occ) fix unaligned accesses
Arnd Bergmann <arnd(a)arndb.de>
hwmon: (occ) Rework attribute registration for stack usage
Eddie James <eajames(a)linux.ibm.com>
hwmon: (occ) Add soft minimum power cap attribute
Eddie James <eajames(a)linux.ibm.com>
hwmon: (occ) Add new temperature sensor type
Jacob Keller <jacob.e.keller(a)intel.com>
drm/nouveau/bl: increase buffer size to avoid truncate warning
Gao Xiang <hsiangkao(a)linux.alibaba.com>
erofs: remove unused trace event erofs_destroy_inode
Jann Horn <jannh(a)google.com>
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
Liu Shixin <liushixin2(a)huawei.com>
mm: hugetlb: independent PMD page table shared count
Jann Horn <jannh(a)google.com>
mm/hugetlb: unshare page tables during VMA split, not before
James Houghton <jthoughton(a)google.com>
hugetlb: unshare some PMDs when splitting VMAs
Jonathan Lane <jon(a)borg.moe>
ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
Takashi Iwai <tiwai(a)suse.de>
ALSA: hda/intel: Add Thinkpad E15 to PM deny list
wangdicheng <wangdicheng(a)kylinos.cn>
ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card
WangYuli <wangyuli(a)uniontech.com>
Input: sparcspkr - avoid unannotated fall-through
Terry Junge <linuxhid(a)cosmicgizmosystems.com>
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: Revert atm_account_tx() if copy_from_iter_full() fails.
Stephen Smalley <stephen.smalley.work(a)gmail.com>
selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
Marek Szyprowski <m.szyprowski(a)samsung.com>
udmabuf: use sgtable-based scatterlist wrappers
Peter Oberparleiter <oberpar(a)linux.ibm.com>
scsi: s390: zfcp: Ensure synchronous unit_add
Dexuan Cui <decui(a)microsoft.com>
scsi: storvsc: Increase the timeouts to storvsc_timeout
Fedor Pchelkin <pchelkin(a)ispras.ru>
jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
Artem Sadovnikov <a.sadovnikov(a)ispras.ru>
jffs2: check that raw node were preallocated before writing summary
Andrew Morton <akpm(a)linux-foundation.org>
drivers/rapidio/rio_cm.c: prevent possible heap overwrite
Breno Leitao <leitao(a)debian.org>
Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older
Narayana Murty N <nnmlinux(a)linux.ibm.com>
powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
Stuart Hayes <stuart.w.hayes(a)gmail.com>
platform/x86: dell_rbu: Stop overwriting data buffer
Stuart Hayes <stuart.w.hayes(a)gmail.com>
platform/x86: dell_rbu: Fix list usage
Maximilian Luz <luzmaximilian(a)gmail.com>
platform: Add Surface platform directory
Alexander Sverdlin <alexander.sverdlin(a)siemens.com>
Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
Jann Horn <jannh(a)google.com>
tee: Prevent size calculation wraparound on 32-bit kernels
Sukrut Bellary <sbellary(a)baylibre.com>
ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
Laurentiu Tudor <laurentiu.tudor(a)nxp.com>
bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
Marcus Folkesson <marcus.folkesson(a)gmail.com>
watchdog: da9052_wdt: respect TWDMIN
Kyungwook Boo <bookyungwook(a)gmail.com>
i40e: fix MMIO write access to an invalid page in i40e_clear_hw
Zijun Hu <quic_zijuhu(a)quicinc.com>
sock: Correct error checking condition for (assign|release)_proto_idx()
Daniel Wagner <wagi(a)kernel.org>
scsi: lpfc: Use memcpy() for BIOS version
Zijun Hu <quic_zijuhu(a)quicinc.com>
software node: Correct a OOB check in software_node_get_reference_args()
Ido Schimmel <idosch(a)nvidia.com>
vxlan: Do not treat dst cache initialization errors as fatal
Sean Christopherson <seanjc(a)google.com>
iommu/amd: Ensure GA log notifier callbacks finish running before module unload
Justin Tee <justin.tee(a)broadcom.com>
scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands
Heiko Stuebner <heiko(a)sntech.de>
clk: rockchip: rk3036: mark ddrphy as critical
Benjamin Berg <benjamin(a)sipsolutions.net>
wifi: mac80211: do not offer a mesh path if forwarding is disabled
Jason Xing <kernelxing(a)tencent.com>
net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
Gabor Juhos <j4g8y7(a)gmail.com>
pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
Gabor Juhos <j4g8y7(a)gmail.com>
pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction()
Gabor Juhos <j4g8y7(a)gmail.com>
pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction()
Gabor Juhos <j4g8y7(a)gmail.com>
pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
Jason Xing <kernelxing(a)tencent.com>
net: atlantic: generate software timestamp just before the doorbell
Sebastian Andrzej Siewior <bigeasy(a)linutronix.de>
ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
Eric Dumazet <edumazet(a)google.com>
tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
Eric Dumazet <edumazet(a)google.com>
tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
Moon Yeounsu <yyyynoom(a)gmail.com>
net: dlink: add synchronization for stats update
Tali Perry <tali.perry1(a)gmail.com>
i2c: npcm: Add clock toggle recovery
Petr Malat <oss(a)malat.biz>
sctp: Do not wake readers in __sctp_write_space()
Henk Vergonet <henk.vergonet(a)gmail.com>
wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
Alok Tiwari <alok.a.tiwari(a)oracle.com>
emulex/benet: correct command version selection in be_cmd_get_stats()
Tan En De <ende.tan(a)starfivetech.com>
i2c: designware: Invoke runtime suspend on quick slave re-registration
Zilin Guan <zilin(a)seu.edu.cn>
tipc: use kfree_sensitive() for aead cleanup
Sergio Perez Gonzalez <sperezglz(a)gmail.com>
net: macb: Check return value of dma_set_mask_and_coherent()
Viresh Kumar <viresh.kumar(a)linaro.org>
cpufreq: Force sync policy boost with global boost on sysfs update
George Moussalem <george.moussalem(a)outlook.com>
thermal/drivers/qcom/tsens: Update conditions to strictly evaluate for IP v2+
Simon Schuster <schuster.simon(a)siemens-energy.com>
nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults
Wentao Liang <vulab(a)iscas.ac.cn>
media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()
Hans Verkuil <hverkuil(a)xs4all.nl>
media: tc358743: ignore video while HPD is low
Amber Lin <Amber.Lin(a)amd.com>
drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB
Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org>
drm/msm/dpu: don't select single flush for active CTL blocks
Dylan Wolff <wolffd(a)comp.nus.edu.sg>
jfs: Fix null-ptr-deref in jfs_ioc_trim
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx9: fix CSIB handling
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx8: fix CSIB handling
Zhang Yi <yi.zhang(a)huawei.com>
ext4: prevent stale extent cache entries caused by concurrent get es_cache
Long Li <leo.lilong(a)huawei.com>
sunrpc: fix race in cache cleanup causing stale nextcheck time
Nicolas Dufresne <nicolas.dufresne(a)collabora.com>
media: rkvdec: Initialize the m2m context before the controls
Aditya Dutt <duttaditya18(a)gmail.com>
jfs: fix array-index-out-of-bounds read in add_missing_indices
Zhang Yi <yi.zhang(a)huawei.com>
ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space()
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx7: fix CSIB handling
Nas Chung <nas.chung(a)chipsnmedia.com>
media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx10: fix CSIB handling
Akhil P Oommen <quic_akhilpo(a)quicinc.com>
drm/msm/a6xx: Increase HFI response timeout
Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com>
drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit()
Nas Chung <nas.chung(a)chipsnmedia.com>
media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition
Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org>
drm/msm/hdmi: add runtime PM calls to DDC transfer function
Namjae Jeon <linkinjeon(a)kernel.org>
exfat: fix double free in delayed_free
Damon Ding <damon.ding(a)rock-chips.com>
drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq()
Long Li <leo.lilong(a)huawei.com>
sunrpc: update nextcheck time when adding new cache entries
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdgpu/gfx6: fix CSIB handling
Peter Marheine <pmarheine(a)chromium.org>
ACPI: battery: negate current when discharging
Charan Teja Kalla <quic_charante(a)quicinc.com>
PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
Yuanjun Gong <ruc_gongyuanjun(a)163.com>
ASoC: tegra210_ahub: Add check to of_device_get_match_data()
gldrk <me(a)rarity.fan>
ACPICA: utilities: Fix overflow check in vsnprintf()
Jerry Lv <Jerry.Lv(a)axis.com>
power: supply: bq27xxx: Retrieve again when busy
Seunghun Han <kkamagui(a)gmail.com>
ACPICA: fix acpi parse and parseext cache leaks
Hector Martin <marcan(a)marcan.st>
ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
Ahmed Salem <x0rw3ll(a)gmail.com>
ACPICA: Avoid sequence overread in call to strncmp()
Guilherme G. Piccoli <gpiccoli(a)igalia.com>
clocksource: Fix the CPUs' choice in the watchdog per CPU verification
Seunghun Han <kkamagui(a)gmail.com>
ACPICA: fix acpi operand cache leak in dswstate.c
David Lechner <dlechner(a)baylibre.com>
iio: adc: ad7606_spi: fix reg write value mask
Sean Nyekjaer <sean(a)geanix.com>
iio: imu: inv_icm42600: Fix temperature calculation
Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com>
PCI: Fix lock symmetry in pci_slot_unlock()
Huacai Chen <chenhuacai(a)loongson.cn>
PCI: Add ACS quirk for Loongson PCIe
Long Li <longli(a)microsoft.com>
uio_hv_generic: Use correct size for interrupt and monitor pages
Wentao Liang <vulab(a)iscas.ac.cn>
regulator: max14577: Add error check for max14577_read_reg()
Khem Raj <raj.khem(a)gmail.com>
mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
Gabriel Shahrouzi <gshahrouzi(a)gmail.com>
staging: iio: ad5933: Correct settling cycles encoding per datasheet
Qasim Ijaz <qasdev00(a)gmail.com>
net: ch9200: fix uninitialised access during mii_nway_restart
Ye Bin <yebin10(a)huawei.com>
ftrace: Fix UAF when lookup kallsym after ftrace disabled
Mikulas Patocka <mpatocka(a)redhat.com>
dm-mirror: fix a tiny race condition
Wentao Liang <vulab(a)iscas.ac.cn>
mtd: nand: sunxi: Add randomizer configuration before randomizer enable
Wentao Liang <vulab(a)iscas.ac.cn>
mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk
Jinliang Zheng <alexjlzheng(a)tencent.com>
mm: fix ratelimit_pages update error in dirty_ratio_handler()
Jeongjun Park <aha310510(a)gmail.com>
ipc: fix to protect IPCS lookups using RCU
Da Xue <da(a)libre.computer>
clk: meson-g12a: add missing fclk_div2 to spicc
Arnd Bergmann <arnd(a)arndb.de>
parisc: fix building with gcc-15
GONG Ruiqi <gongruiqi1(a)huawei.com>
vgacon: Add check for vc_origin address range in vgacon_scroll()
Murad Masimov <m.masimov(a)mt-integration.ru>
fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
Niravkumar L Rabara <niravkumar.l.rabara(a)intel.com>
EDAC/altera: Use correct write width with the INTTEST register
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
NFC: nci: uart: Set tty->disc_data only in success path
Chao Yu <chao(a)kernel.org>
f2fs: fix to do sanity check on sit_bitmap_size
Jaegeuk Kim <jaegeuk(a)kernel.org>
f2fs: prevent kernel warning due to negative i_nlink from corrupted image
Dan Carpenter <dan.carpenter(a)linaro.org>
Input: ims-pcu - check record size in ims_pcu_flash_firmware()
Zhang Yi <yi.zhang(a)huawei.com>
ext4: ensure i_size is smaller than maxbytes
Zhang Yi <yi.zhang(a)huawei.com>
ext4: factor out ext4_get_maxbytes()
Jan Kara <jack(a)suse.cz>
ext4: fix calculation of credits for extent tree modification
Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com>
ext4: inline: fix len overflow in ext4_prepare_inline_data
Ioana Ciornei <ioana.ciornei(a)nxp.com>
bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
Tasos Sahanidis <tasos(a)tasossah.com>
ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
Jeff Hugo <quic_jhugo(a)quicinc.com>
bus: mhi: host: Fix conflict between power_up and SYSERR
Andreas Kemnade <andreas(a)kemnade.info>
ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4
Ross Stutterheim <ross.stutterheim(a)garmin.com>
ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
Denis Arefev <arefev(a)swemel.ru>
media: vivid: Change the siize of the composing
Edward Adam Davis <eadavis(a)qq.com>
media: vidtv: Terminating the subsequent process of initialization failure
Marek Szyprowski <m.szyprowski(a)samsung.com>
media: videobuf2: use sgtable-based scatterlist wrappers
Loic Poulain <loic.poulain(a)oss.qualcomm.com>
media: venus: Fix probe error handling
Ma Ke <make24(a)iscas.ac.cn>
media: v4l2-dev: fix error handling in __video_register_device()
Wentao Liang <vulab(a)iscas.ac.cn>
media: gspca: Add error handling for stv06xx_read_sensor()
Edward Adam Davis <eadavis(a)qq.com>
media: cxusb: no longer judge rbuf when the write fails
Johan Hovold <johan+linaro(a)kernel.org>
media: ov8856: suppress probe deferral errors
Mingcong Bai <jeffbai(a)aosc.io>
wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
Jeongjun Park <aha310510(a)gmail.com>
jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
Li Lingfeng <lilingfeng3(a)huawei.com>
nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
NeilBrown <neil(a)brown.name>
nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
Christian Lamparter <chunkeey(a)gmail.com>
wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
Wentao Liang <vulab(a)iscas.ac.cn>
net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
Wentao Liang <vulab(a)iscas.ac.cn>
net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr()
Martin Blumenstingl <martin.blumenstingl(a)googlemail.com>
ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
Wentao Liang <vulab(a)iscas.ac.cn>
ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params()
Alexander Aring <aahringo(a)redhat.com>
gfs2: move msleep to sleepable context
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: marvell/cesa - Do not chain submitted requests
Zijun Hu <quic_zijuhu(a)quicinc.com>
configfs: Do not override creating attribute file failure in populate_attrs()
Eric Dumazet <edumazet(a)google.com>
tcp: tcp_data_ready() must look at SOCK_DONE
Arnd Bergmann <arnd(a)arndb.de>
kbuild: hdrcheck: fix cross build with clang
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
kbuild: userprogs: fix bitsize and target detection on clang
Oliver Neukum <oneukum(a)suse.com>
net: usb: aqc111: debug info before sanitation
Eric Dumazet <edumazet(a)google.com>
calipso: unlock rcu before returning -EAFNOSUPPORT
Thomas Gleixner <tglx(a)linutronix.de>
x86/iopl: Cure TIF_IO_BITMAP inconsistencies
Stefano Stabellini <stefano.stabellini(a)amd.com>
xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: Flush altsetting 0 endpoints before reinitializating them after reset.
Nathan Chancellor <nathan(a)kernel.org>
drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for clang
Nathan Chancellor <nathan(a)kernel.org>
kbuild: Add KBUILD_CPPFLAGS to as-option invocation
Masahiro Yamada <masahiroy(a)kernel.org>
kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS
Nathan Chancellor <nathan(a)kernel.org>
kbuild: Add CLANG_FLAGS to as-instr
Nathan Chancellor <nathan(a)kernel.org>
mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation
Nathan Chancellor <nathan(a)kernel.org>
drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang
Nick Desaulniers <ndesaulniers(a)google.com>
kbuild: Update assembler calls to use proper flags and language target
Nathan Chancellor <nathan(a)kernel.org>
MIPS: Prefer cc-option for additions to cflags
Nathan Chancellor <nathan(a)kernel.org>
MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option
Nick Desaulniers <ndesaulniers(a)google.com>
x86/boot/compressed: prefer cc-option for CFLAGS additions
Oleg Nesterov <oleg(a)redhat.com>
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
Zijun Hu <quic_zijuhu(a)quicinc.com>
fs/filesystems: Fix potential unsigned integer underflow in fs_name()
Eric Dumazet <edumazet(a)google.com>
net_sched: ets: fix a race in ets_qdisc_change()
Cong Wang <xiyou.wangcong(a)gmail.com>
sch_ets: make est_qlen_notify() idempotent
Eric Dumazet <edumazet(a)google.com>
net_sched: tbf: fix a race in tbf_change()
Eric Dumazet <edumazet(a)google.com>
net_sched: red: fix a race in __red_change()
Eric Dumazet <edumazet(a)google.com>
net_sched: prio: fix a race in prio_tune()
Patrisious Haddad <phaddad(a)nvidia.com>
net/mlx5: Fix return value when searching for existing flow group
Moshe Shemesh <moshe(a)nvidia.com>
net/mlx5: Ensure fw pages are always allocated on same NUMA
Jakub Raczynski <j.raczynski(a)samsung.com>
net/mdiobus: Fix potential out-of-bounds read/write access
Andrew Lunn <andrew(a)lunn.ch>
net: mdio: C22 is now optional, EOPNOTSUPP if not provided
Carlos Fernandez <carlos.fernandez(a)technica-engineering.de>
macsec: MACsec SCI assignment for ES = 0
Michal Luczaj <mhal(a)rbox.co>
net: Fix TOCTOU issue in sk_is_readable()
Cong Wang <cong.wang(a)bytedance.com>
net: Rename ->stream_memory_read to ->sock_is_readable
Cong Wang <cong.wang(a)bytedance.com>
bpf: Clean up sockmap related Kconfigs
Eric Dumazet <edumazet(a)google.com>
tcp: factorize logic into tcp_epollin_ready()
Robert Malz <robert.malz(a)canonical.com>
i40e: retry VFLR handling if there is ongoing VF reset
Robert Malz <robert.malz(a)canonical.com>
i40e: return false from i40e_reset_vf if reset is in progress
Haren Myneni <haren(a)linux.ibm.com>
powerpc/vas: Return -EINVAL if the offset is non-zero in mmap()
Haren Myneni <haren(a)linux.ibm.com>
powerpc/vas: Move VAS API to book3s common platform
Eric Dumazet <edumazet(a)google.com>
net_sched: sch_sfq: fix a potential crash on gso_skb handling
Alok Tiwari <alok.a.tiwari(a)oracle.com>
scsi: iscsi: Fix incorrect error path labels for flashnode operations
Caleb Connolly <caleb.connolly(a)linaro.org>
ath10k: snoc: fix unbalanced IRQ enable in crash recovery
Wen Gong <wgong(a)codeaurora.org>
ath10k: prevent deinitializing NAPI twice
Wen Gong <wgong(a)codeaurora.org>
ath10k: add atomic protection for device recovery
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
serial: sh-sci: Clean sci_ports[0] after at earlycon exit
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
serial: sh-sci: Move runtime PM enable to sci_probe_single()
Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com>
serial: sh-sci: Check if TX data was written to device in .tx_empty()
Judith Mendez <jm(a)ti.com>
arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
Judith Mendez <jm(a)ti.com>
arm64: dts: ti: k3-am65-main: Fix sdhci node properties
Nishanth Menon <nm(a)ti.com>
arm64: dts: ti: k3-am65-main: Drop deprecated ti,otap-del-sel property
Dmitry Torokhov <dmitry.torokhov(a)gmail.com>
Input: synaptics-rmi - fix crash with unsupported versions of F34
zhang songyi <zhang.songyi(a)zte.com.cn>
Input: synaptics-rmi4 - convert to use sysfs_emit() APIs
Dan Carpenter <dan.carpenter(a)linaro.org>
pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
Al Viro <viro(a)zeniv.linux.org.uk>
do_change_type(): refuse to operate on unmounted/not ours mounts
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
Ronak Doshi <ronak.doshi(a)broadcom.com>
vmxnet3: correctly report gso type for UDP tunnels
Michal Kubiak <michal.kubiak(a)intel.com>
ice: create new Tx scheduler nodes for new queues only
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
Álvaro Fernández Rojas <noltari(a)gmail.com>
spi: bcm63xx-hsspi: fix shared reset
Álvaro Fernández Rojas <noltari(a)gmail.com>
spi: bcm63xx-spi: fix shared reset
Dan Carpenter <dan.carpenter(a)linaro.org>
net/mlx4_en: Prevent potential integer overflow calculating Hz
Yanqing Wang <ot_yanqing.wang(a)mediatek.com>
driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
Charalampos Mitrodimas <charmitro(a)posteo.net>
net: tipc: fix refcount warning in tipc_aead_encrypt
Alok Tiwari <alok.a.tiwari(a)oracle.com>
gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
Quentin Schulz <quentin.schulz(a)cherry.de>
net: stmmac: platform: guarantee uniqueness of bus_id
Nicolas Pitre <npitre(a)baylibre.com>
vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
WangYuli <wangyuli(a)uniontech.com>
MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
iio: adc: ad7124: Fix 3dB filter frequency reading
Henry Martin <bsdhenrymartin(a)gmail.com>
serial: Fix potential null-ptr-deref in mlb_usio_probe()
Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com>
usb: renesas_usbhs: Reorder clock handling and power management in probe
Alexandre Mergnat <amergnat(a)baylibre.com>
rtc: Fix offset calculation for .start_secs < 0
Bjorn Helgaas <bhelgaas(a)google.com>
PCI/DPC: Initialize aer_err_info before using it
Henry Martin <bsdhenrymartin(a)gmail.com>
dmaengine: ti: Add NULL check in udma_probe()
Hans Zhang <18255117159(a)163.com>
PCI: cadence: Fix runtime atomic count underflow
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
rtc: sh: assign correct interrupts with DT
Li Lingfeng <lilingfeng3(a)huawei.com>
nfs: ignore SB_RDONLY when remounting nfs
Li Lingfeng <lilingfeng3(a)huawei.com>
nfs: clear SB_RDONLY before getting superblock
Dapeng Mi <dapeng1.mi(a)linux.intel.com>
perf record: Fix incorrect --user-regs comments
Leo Yan <leo.yan(a)arm.com>
perf tests switch-tracking: Fix timestamp comparison
Alexey Gladkov <legion(a)kernel.org>
mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
Christophe JAILLET <christophe.jaillet(a)wanadoo.fr>
mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove()
Dan Carpenter <dan.carpenter(a)linaro.org>
rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
Adrian Hunter <adrian.hunter(a)intel.com>
perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3
Henry Martin <bsdhenrymartin(a)gmail.com>
backlight: pm8941: Add NULL check in wled_configure()
Arnaldo Carvalho de Melo <acme(a)redhat.com>
perf ui browser hists: Set actions->thread before calling do_zoom_thread()
Arnaldo Carvalho de Melo <acme(a)redhat.com>
perf build: Warn when libdebuginfod devel files are not available
Kees Cook <kees(a)kernel.org>
randstruct: gcc-plugin: Fix attribute addition
Kees Cook <kees(a)kernel.org>
randstruct: gcc-plugin: Remove bogus void member
Sergey Shtylyov <s.shtylyov(a)omp.ru>
fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
Henry Martin <bsdhenrymartin(a)gmail.com>
soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
Su Hui <suhui(a)nfschina.com>
soc: aspeed: lpc: Fix impossible judgment condition
Quentin Schulz <quentin.schulz(a)cherry.de>
arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou
Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com>
ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device
Ioana Ciornei <ioana.ciornei(a)nxp.com>
bus: fsl-mc: fix double-free on mc_dev
Ryusuke Konishi <konishi.ryusuke(a)gmail.com>
nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
Wentao Liang <vulab(a)iscas.ac.cn>
nilfs2: add pointer check for nilfs_direct_propagate()
Phillip Lougher <phillip(a)squashfs.org.uk>
Squashfs: check return result of sb_min_blocksize
Adam Ford <aford173(a)gmail.com>
arm64: dts: imx8mm-beacon: Fix RTC capacitive load
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
ARM: dts: at91: at91sam9263: fix NAND chip selects
Wolfram Sang <wsa+renesas(a)sang-engineering.com>
ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
Zhiguo Niu <zhiguo.niu(a)unisoc.com>
f2fs: fix to correct check conditions in f2fs_cross_rename
Zhiguo Niu <zhiguo.niu(a)unisoc.com>
f2fs: use d_inode(dentry) cleanup dentry->d_inode
Horatiu Vultur <horatiu.vultur(a)microchip.com>
net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
Faicker Mo <faicker.mo(a)zenlayer.com>
net: openvswitch: Fix the dead loop of MPLS parse
Kuniyuki Iwashima <kuniyu(a)amazon.com>
calipso: Don't call calipso functions for AF_INET sk.
Thangaraj Samynathan <thangaraj.s(a)microchip.com>
net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
Nikita Zhandarovich <n.zhandarovich(a)fintech.ru>
net: usb: aqc111: fix error handling of usbnet read calls
Fernando Fernandez Mancera <fmancera(a)suse.de>
netfilter: nft_tunnel: fix geneve_opt dump
Li RongQing <lirongqing(a)baidu.com>
vfio/type1: Fix error unwind in migration dirty bitmap allocation
Florian Westphal <fw(a)strlen.de>
netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
Toke Høiland-Jørgensen <toke(a)toke.dk>
wifi: ath9k_htc: Abort software beacon handling if disabled
Ilya Leoshkevich <iii(a)linux.ibm.com>
s390/bpf: Store backchain even for leaf progs
Vincent Knecht <vincent.knecht(a)mailoo.org>
clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
Tao Chen <chen.dylane(a)linux.dev>
bpf: Fix WARN() in get_bpf_raw_tp_regs
Andy Shevchenko <andriy.shevchenko(a)linux.intel.com>
pinctrl: at91: Fix possible out-of-boundary access
Anton Protopopov <a.s.protopopov(a)gmail.com>
libbpf: Use proper errno value in nlattr
Jiayuan Chen <jiayuan.chen(a)linux.dev>
ktls, sockmap: Fix missing uncharge operation
Henry Martin <bsdhenrymartin(a)gmail.com>
clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
Patrisious Haddad <phaddad(a)nvidia.com>
RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
Huajian Yang <huajianyang(a)asrmicro.com>
netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it
Chao Yu <chao(a)kernel.org>
f2fs: clean up w/ fscrypt_is_bounce_page()
Junxian Huang <huangjunxian6(a)hisilicon.com>
RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
Dmitry Antipov <dmantipov(a)yandex.ru>
wifi: rtw88: do not ignore hardware read error during DPK
Hari Kalavakunta <kalavakunta.hari.prasad(a)gmail.com>
net: ncsi: Fix GCPS 64-bit member variables
Chao Yu <chao(a)kernel.org>
f2fs: fix to do sanity check on sbi->total_valid_block_count
Stone Zhang <quic_stonez(a)quicinc.com>
wifi: ath11k: fix node corruption in ar->arvifs list
Huang Yiwei <quic_hyiwei(a)quicinc.com>
firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
Biju Das <biju.das.jz(a)bp.renesas.com>
drm/tegra: rgb: Fix the unbound reference count
Kees Cook <kees(a)kernel.org>
drm/vkms: Adjust vkms_state->active_planes allocation type
Biju Das <biju.das.jz(a)bp.renesas.com>
drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
Neill Kapron <nkapron(a)google.com>
selftests/seccomp: fix syscall_restart test for arm compat
Miaoqian Lin <linmq006(a)gmail.com>
firmware: psci: Fix refcount leak in psci_dt_init
Finn Thain <fthain(a)linux-m68k.org>
m68k: mac: Fix macintosh_config for Mac II
Jonas Karlman <jonas(a)kwiboo.se>
media: rkvdec: Fix frame size enumeration
Ian Forbes <ian.forbes(a)broadcom.com>
drm/vmwgfx: Add seqno waiter for sync_files
Geert Uytterhoeven <geert+renesas(a)glider.be>
spi: sh-msiof: Fix maximum DMA transfer size
Armin Wolf <W_Armin(a)gmx.de>
ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
Jiaqing Zhao <jiaqing.zhao(a)linux.intel.com>
x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
Zijun Hu <quic_zijuhu(a)quicinc.com>
PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks()
Alexander Shiyan <eagle.alexander923(a)gmail.com>
power: reset: at91-reset: Optimize at91_reset()
Qiuxu Zhuo <qiuxu.zhuo(a)intel.com>
EDAC/skx_common: Fix general protection fault
Ovidiu Panait <ovidiu.panait.oss(a)gmail.com>
crypto: sun8i-ce - move fallback ahash_request to the end of the struct
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: xts - Only add ecb if it is not already there
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: lrw - Only add ecb if it is not already there
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: marvell/cesa - Avoid empty transfer descriptor
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: marvell/cesa - Handle zero-length skcipher requests
Ahmed S. Darwish <darwi(a)linutronix.de>
x86/cpu: Sanitize CPUID(0x80000000) output
Corentin Labbe <clabbe.montjoie(a)gmail.com>
crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
Qing Wang <wangqing7171(a)gmail.com>
perf/core: Fix broken throttling when max_samples_per_tick=1
Andreas Gruenbacher <agruenba(a)redhat.com>
gfs2: gfs2_create_inode error handling fix
Florian Westphal <fw(a)strlen.de>
netfilter: nft_socket: fix sk refcount leaks
Sergey Senozhatsky <senozhatsky(a)chromium.org>
thunderbolt: Do not double dequeue a configuration request
Dave Penkler <dpenkler(a)gmail.com>
usb: usbtmc: Fix timeout value in get_stb
Hongyu Xie <xiehongyu1(a)kylinos.cn>
usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
Jiayi Li <lijiayi(a)kylinos.cn>
usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
Gautham R. Shenoy <gautham.shenoy(a)amd.com>
acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
Gabor Juhos <j4g8y7(a)gmail.com>
pinctrl: armada-37xx: set GPIO output value before setting direction
Gabor Juhos <j4g8y7(a)gmail.com>
pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
Pan Taixi <pantaixi(a)huaweicloud.com>
tracing: Fix compilation warning on arm32
-------------
Diffstat:
Documentation/admin-guide/kernel-parameters.txt | 7 +-
MAINTAINERS | 9 +
Makefile | 11 +-
arch/arm/boot/dts/am335x-bone-common.dtsi | 8 +
arch/arm/boot/dts/at91sam9263ek.dts | 2 +-
arch/arm/boot/dts/qcom-apq8064.dtsi | 13 +-
arch/arm/boot/dts/tny_a9263.dts | 2 +-
arch/arm/boot/dts/usb_a9263.dts | 4 +-
arch/arm/mach-omap2/clockdomain.h | 1 +
arch/arm/mach-omap2/clockdomains33xx_data.c | 2 +-
arch/arm/mach-omap2/cm33xx.c | 14 +-
arch/arm/mach-omap2/pmic-cpcap.c | 6 +-
arch/arm/mm/ioremap.c | 4 +-
.../boot/dts/freescale/imx8mm-beacon-som.dtsi | 1 +
.../arm64/boot/dts/rockchip/rk3399-puma-haikou.dts | 8 -
arch/arm64/boot/dts/ti/k3-am65-main.dtsi | 20 +-
arch/arm64/include/asm/cputype.h | 2 +
arch/arm64/include/asm/debug-monitors.h | 12 -
arch/arm64/include/asm/insn.h | 114 +++++++-
arch/arm64/include/asm/spectre.h | 4 +-
arch/arm64/kernel/insn.c | 199 ++++++++++++-
arch/arm64/kernel/proton-pack.c | 202 ++++++++------
arch/arm64/kernel/ptrace.c | 2 +-
arch/arm64/net/bpf_jit.h | 11 +-
arch/arm64/net/bpf_jit_comp.c | 58 +++-
arch/arm64/xen/hypercall.S | 21 +-
arch/m68k/mac/config.c | 2 +-
arch/mips/Makefile | 6 +-
.../boot/dts/loongson/loongson64c_4core_ls7a.dts | 1 +
arch/mips/loongson2ef/Platform | 2 +-
arch/mips/vdso/Makefile | 1 +
arch/nios2/include/asm/pgtable.h | 16 ++
arch/parisc/boot/compressed/Makefile | 1 +
arch/powerpc/include/asm/vas.h | 3 +
arch/powerpc/kernel/eeh.c | 2 +
arch/powerpc/platforms/Kconfig | 1 +
arch/powerpc/platforms/Makefile | 1 +
arch/powerpc/platforms/book3s/Kconfig | 15 +
arch/powerpc/platforms/book3s/Makefile | 2 +
.../platforms/{powernv => book3s}/vas-api.c | 11 +-
arch/powerpc/platforms/powernv/Kconfig | 14 -
arch/powerpc/platforms/powernv/Makefile | 2 +-
arch/powerpc/platforms/powernv/vas.h | 2 -
arch/s390/net/bpf_jit_comp.c | 12 +-
arch/s390/pci/pci_mmio.c | 2 +-
arch/x86/boot/compressed/Makefile | 2 +-
arch/x86/kernel/cpu/bugs.c | 10 +-
arch/x86/kernel/cpu/common.c | 17 +-
arch/x86/kernel/cpu/mtrr/generic.c | 2 +-
arch/x86/kernel/ioport.c | 13 +-
arch/x86/kernel/process.c | 6 +
crypto/lrw.c | 4 +-
crypto/xts.c | 4 +-
drivers/acpi/acpica/dsutils.c | 9 +-
drivers/acpi/acpica/psobject.c | 52 +---
drivers/acpi/acpica/utprint.c | 7 +-
drivers/acpi/apei/Kconfig | 1 +
drivers/acpi/apei/ghes.c | 2 +-
drivers/acpi/battery.c | 19 +-
drivers/acpi/osi.c | 1 -
drivers/ata/pata_via.c | 3 +-
drivers/atm/atmtcp.c | 4 +-
drivers/base/power/domain.c | 2 +-
drivers/base/power/main.c | 3 +-
drivers/base/power/runtime.c | 2 +-
drivers/base/swnode.c | 2 +-
drivers/block/aoe/aoedev.c | 8 +
drivers/bus/fsl-mc/fsl-mc-bus.c | 6 +-
drivers/bus/fsl-mc/mc-io.c | 19 +-
drivers/bus/fsl-mc/mc-sys.c | 2 +-
drivers/bus/mhi/host/pm.c | 18 +-
drivers/bus/ti-sysc.c | 49 ----
drivers/clk/bcm/clk-raspberrypi.c | 2 +
drivers/clk/meson/g12a.c | 1 +
drivers/clk/qcom/gcc-msm8939.c | 4 +-
drivers/clk/rockchip/clk-rk3036.c | 1 +
drivers/cpufreq/acpi-cpufreq.c | 2 +-
drivers/cpufreq/cpufreq.c | 6 +-
drivers/crypto/allwinner/sun8i-ce/sun8i-ce.h | 2 +-
.../crypto/allwinner/sun8i-ss/sun8i-ss-cipher.c | 2 +-
drivers/crypto/marvell/cesa/cesa.c | 2 +-
drivers/crypto/marvell/cesa/cesa.h | 9 +-
drivers/crypto/marvell/cesa/cipher.c | 3 +
drivers/crypto/marvell/cesa/hash.c | 2 +-
drivers/crypto/marvell/cesa/tdma.c | 53 ++--
drivers/dma-buf/udmabuf.c | 5 +-
drivers/dma/ti/k3-udma.c | 3 +-
drivers/edac/altera_edac.c | 6 +-
drivers/edac/skx_common.c | 1 +
drivers/firmware/Kconfig | 1 -
drivers/firmware/arm_sdei.c | 11 +-
drivers/firmware/psci/psci.c | 4 +-
drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 2 -
drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 2 -
drivers/gpu/drm/amd/amdgpu/gfx_v7_0.c | 2 -
drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c | 2 -
drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 2 -
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c | 4 +
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 18 +-
drivers/gpu/drm/amd/display/dc/dcn20/Makefile | 2 +-
drivers/gpu/drm/amd/display/dc/dcn21/Makefile | 2 +-
drivers/gpu/drm/amd/display/dc/dml/Makefile | 3 +-
drivers/gpu/drm/bridge/analogix/analogix_dp_core.c | 5 +-
drivers/gpu/drm/msm/adreno/a6xx_hfi.c | 2 +-
.../gpu/drm/msm/disp/dpu1/dpu_encoder_phys_vid.c | 3 +-
drivers/gpu/drm/msm/hdmi/hdmi_i2c.c | 14 +-
drivers/gpu/drm/nouveau/nouveau_backlight.c | 2 +-
drivers/gpu/drm/rcar-du/rcar_du_kms.c | 10 +-
drivers/gpu/drm/tegra/rgb.c | 14 +-
drivers/gpu/drm/vkms/vkms_crtc.c | 2 +-
drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 26 ++
drivers/hid/hid-hyperv.c | 5 +-
drivers/hid/usbhid/hid-core.c | 25 +-
drivers/hwmon/occ/common.c | 307 ++++++++++++---------
drivers/i2c/busses/i2c-designware-slave.c | 2 +-
drivers/i2c/busses/i2c-npcm7xx.c | 12 +-
drivers/iio/adc/ad7124.c | 4 +-
drivers/iio/adc/ad7606_spi.c | 2 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_temp.c | 8 +-
drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 1 -
drivers/infiniband/hw/hns/hns_roce_hw_v2.h | 1 +
drivers/infiniband/hw/hns/hns_roce_main.c | 1 -
drivers/infiniband/hw/hns/hns_roce_restrack.c | 1 -
drivers/infiniband/hw/mlx5/qpc.c | 30 +-
drivers/input/misc/ims-pcu.c | 6 +
drivers/input/misc/sparcspkr.c | 22 +-
drivers/input/rmi4/rmi_f34.c | 135 +++++----
drivers/iommu/amd/iommu.c | 8 +
drivers/md/dm-raid1.c | 5 +-
drivers/media/common/videobuf2/videobuf2-dma-sg.c | 4 +-
drivers/media/i2c/ov8856.c | 9 +-
drivers/media/i2c/tc358743.c | 4 +
drivers/media/platform/exynos4-is/fimc-is-regs.c | 1 +
drivers/media/platform/qcom/venus/core.c | 16 +-
drivers/media/test-drivers/vidtv/vidtv_channel.c | 2 +-
drivers/media/test-drivers/vivid/vivid-vid-cap.c | 2 +-
drivers/media/usb/dvb-usb/cxusb.c | 3 +-
drivers/media/usb/gspca/stv06xx/stv06xx_hdcs.c | 7 +-
drivers/media/v4l2-core/v4l2-dev.c | 14 +-
drivers/mfd/exynos-lpass.c | 1 -
drivers/mfd/stmpe-spi.c | 2 +-
drivers/mtd/nand/raw/sunxi_nand.c | 2 +
drivers/net/ethernet/aquantia/atlantic/aq_main.c | 1 -
drivers/net/ethernet/aquantia/atlantic/aq_nic.c | 2 +
drivers/net/ethernet/cadence/macb_main.c | 6 +-
drivers/net/ethernet/dlink/dl2k.c | 14 +-
drivers/net/ethernet/dlink/dl2k.h | 2 +
drivers/net/ethernet/emulex/benet/be_cmds.c | 2 +-
drivers/net/ethernet/google/gve/gve_main.c | 2 +-
drivers/net/ethernet/intel/i40e/i40e_common.c | 7 +-
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 11 +-
drivers/net/ethernet/intel/ice/ice_arfs.c | 48 ++++
drivers/net/ethernet/intel/ice/ice_sched.c | 11 +-
drivers/net/ethernet/mediatek/mtk_star_emac.c | 4 +
drivers/net/ethernet/mellanox/mlx4/en_clock.c | 2 +-
drivers/net/ethernet/mellanox/mlx4/en_ethtool.c | 1 +
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 5 +-
.../net/ethernet/mellanox/mlx5/core/pagealloc.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/vport.c | 18 +-
drivers/net/ethernet/microchip/lan743x_main.c | 4 +-
.../net/ethernet/stmicro/stmmac/stmmac_platform.c | 11 +-
drivers/net/macsec.c | 40 ++-
drivers/net/phy/mdio_bus.c | 16 +-
drivers/net/phy/mscc/mscc_ptp.c | 4 +-
drivers/net/usb/aqc111.c | 10 +-
drivers/net/usb/ch9200.c | 7 +-
drivers/net/vmxnet3/vmxnet3_drv.c | 26 ++
drivers/net/vxlan/vxlan_core.c | 8 +-
drivers/net/wireless/ath/ath10k/ahb.c | 5 +-
drivers/net/wireless/ath/ath10k/core.c | 36 +++
drivers/net/wireless/ath/ath10k/core.h | 9 +
drivers/net/wireless/ath/ath10k/debug.c | 6 +-
drivers/net/wireless/ath/ath10k/mac.c | 1 +
drivers/net/wireless/ath/ath10k/pci.c | 9 +-
drivers/net/wireless/ath/ath10k/sdio.c | 11 +-
drivers/net/wireless/ath/ath10k/snoc.c | 12 +-
drivers/net/wireless/ath/ath10k/wmi.c | 2 +-
drivers/net/wireless/ath/ath11k/core.c | 8 +-
drivers/net/wireless/ath/ath9k/htc_drv_beacon.c | 3 +
drivers/net/wireless/ath/carl9170/usb.c | 19 +-
drivers/net/wireless/intersil/p54/fwio.c | 2 +
drivers/net/wireless/intersil/p54/p54.h | 1 +
drivers/net/wireless/intersil/p54/txrx.c | 13 +-
drivers/net/wireless/mediatek/mt76/mt76x2/usb.c | 2 +
.../net/wireless/mediatek/mt76/mt76x2/usb_init.c | 13 +-
drivers/net/wireless/realtek/rtlwifi/pci.c | 10 +
drivers/net/wireless/realtek/rtw88/rtw8822c.c | 3 +-
drivers/pci/controller/cadence/pcie-cadence-host.c | 11 +-
drivers/pci/pci.c | 3 +-
drivers/pci/pcie/dpc.c | 2 +-
drivers/pci/quirks.c | 23 ++
drivers/pinctrl/mvebu/pinctrl-armada-37xx.c | 35 ++-
drivers/pinctrl/pinctrl-at91.c | 6 +-
drivers/platform/Kconfig | 2 +
drivers/platform/Makefile | 1 +
drivers/platform/surface/Kconfig | 14 +
drivers/platform/surface/Makefile | 5 +
drivers/platform/x86/dell_rbu.c | 6 +-
drivers/power/reset/at91-reset.c | 5 +-
drivers/power/supply/bq27xxx_battery.c | 2 +-
drivers/power/supply/bq27xxx_battery_i2c.c | 13 +-
drivers/rapidio/rio_cm.c | 3 +
drivers/regulator/max14577-regulator.c | 5 +-
drivers/rpmsg/qcom_smd.c | 2 +-
drivers/rtc/Kconfig | 10 +
drivers/rtc/Makefile | 1 +
drivers/rtc/class.c | 2 +-
drivers/rtc/lib.c | 121 ++++++--
drivers/rtc/lib_test.c | 79 ++++++
drivers/rtc/rtc-sh.c | 12 +-
drivers/s390/scsi/zfcp_sysfs.c | 2 +
drivers/scsi/lpfc/lpfc_hbadisc.c | 2 +-
drivers/scsi/lpfc/lpfc_sli.c | 4 +-
drivers/scsi/scsi_transport_iscsi.c | 11 +-
drivers/scsi/storvsc_drv.c | 10 +-
drivers/soc/aspeed/aspeed-lpc-snoop.c | 17 +-
drivers/spi/spi-bcm63xx-hsspi.c | 2 +-
drivers/spi/spi-bcm63xx.c | 2 +-
drivers/spi/spi-sh-msiof.c | 13 +-
drivers/staging/iio/impedance-analyzer/ad5933.c | 2 +-
drivers/staging/media/rkvdec/rkvdec.c | 24 +-
drivers/tee/tee_core.c | 11 +-
drivers/thermal/qcom/tsens.c | 10 +-
drivers/thunderbolt/ctl.c | 5 +
drivers/tty/serial/milbeaut_usio.c | 5 +-
drivers/tty/serial/sh-sci.c | 97 +++++--
drivers/tty/vt/vt_ioctl.c | 2 -
drivers/uio/uio_hv_generic.c | 4 +-
drivers/usb/class/usbtmc.c | 4 +-
drivers/usb/core/hub.c | 16 +-
drivers/usb/core/quirks.c | 3 +
drivers/usb/gadget/function/f_hid.c | 12 +-
drivers/usb/renesas_usbhs/common.c | 50 +++-
drivers/usb/storage/unusual_uas.h | 7 +
drivers/vfio/vfio_iommu_type1.c | 2 +-
drivers/video/backlight/qcom-wled.c | 6 +-
drivers/video/console/vgacon.c | 2 +-
drivers/video/fbdev/core/fbcvt.c | 2 +-
drivers/video/fbdev/core/fbmem.c | 4 +-
drivers/watchdog/da9052_wdt.c | 1 +
fs/configfs/dir.c | 2 +-
fs/exfat/nls.c | 1 +
fs/ext4/ext4.h | 7 +
fs/ext4/extents.c | 39 ++-
fs/ext4/file.c | 7 +-
fs/ext4/inline.c | 2 +-
fs/ext4/inode.c | 3 +-
fs/ext4/ioctl.c | 8 +-
fs/f2fs/data.c | 2 +-
fs/f2fs/f2fs.h | 10 +-
fs/f2fs/namei.c | 19 +-
fs/f2fs/super.c | 12 +-
fs/filesystems.c | 14 +-
fs/gfs2/inode.c | 3 +-
fs/gfs2/lock_dlm.c | 3 +-
fs/jbd2/transaction.c | 5 +-
fs/jffs2/erase.c | 4 +-
fs/jffs2/scan.c | 4 +-
fs/jffs2/summary.c | 7 +-
fs/jfs/jfs_discard.c | 3 +-
fs/jfs/jfs_dtree.c | 18 +-
fs/namespace.c | 4 +
fs/nfs/super.c | 19 ++
fs/nfsd/nfs4proc.c | 3 +-
fs/nfsd/nfssvc.c | 6 +-
fs/nilfs2/btree.c | 4 +-
fs/nilfs2/direct.c | 3 +
fs/squashfs/super.c | 5 +
include/acpi/actypes.h | 2 +-
include/linux/arm_sdei.h | 4 +-
include/linux/atmdev.h | 6 +
include/linux/bpf.h | 26 +-
include/linux/bpf_types.h | 6 +-
include/linux/hid.h | 3 +-
include/linux/hugetlb.h | 6 +
include/linux/mlx5/driver.h | 1 +
include/linux/mm.h | 3 +
include/linux/mm_types.h | 3 +
include/linux/skmsg.h | 18 ++
include/net/checksum.h | 2 +-
include/net/sock.h | 11 +-
include/net/tcp.h | 28 +-
include/net/tls.h | 2 +-
include/net/udp.h | 4 +-
include/trace/events/erofs.h | 18 --
include/uapi/linux/bpf.h | 2 +
include/uapi/linux/videodev2.h | 12 +-
init/Kconfig | 1 +
ipc/shm.c | 5 +-
kernel/bpf/verifier.c | 175 +-----------
kernel/events/core.c | 23 +-
kernel/exit.c | 17 +-
kernel/power/wakelock.c | 3 +
kernel/time/clocksource.c | 2 +-
kernel/time/posix-cpu-timers.c | 9 +
kernel/trace/bpf_trace.c | 2 +-
kernel/trace/ftrace.c | 10 +-
kernel/trace/trace.c | 2 +-
lib/Kconfig | 1 +
mm/huge_memory.c | 2 +-
mm/hugetlb.c | 117 +++++++-
mm/mmap.c | 8 +
mm/page-writeback.c | 2 +-
net/Kconfig | 6 +-
net/atm/common.c | 1 +
net/atm/lec.c | 12 +-
net/atm/raw.c | 2 +-
net/bluetooth/l2cap_core.c | 3 +-
net/bridge/netfilter/nf_conntrack_bridge.c | 12 +-
net/core/Makefile | 6 +-
net/core/filter.c | 5 +-
net/core/skmsg.c | 145 +++++-----
net/core/sock.c | 4 +-
net/core/sock_map.c | 2 +
net/core/utils.c | 4 +-
net/ipv4/Makefile | 2 +-
net/ipv4/inet_hashtables.c | 2 +-
net/ipv4/route.c | 4 +
net/ipv4/tcp.c | 21 +-
net/ipv4/tcp_bpf.c | 8 +-
net/ipv4/tcp_input.c | 74 ++---
net/ipv6/calipso.c | 8 +
net/ipv6/ila/ila_common.c | 6 +-
net/ipv6/netfilter.c | 12 +-
net/ipv6/netfilter/nft_fib_ipv6.c | 13 +-
net/mac80211/mesh_hwmp.c | 6 +-
net/mpls/af_mpls.c | 4 +-
net/ncsi/internal.h | 21 +-
net/ncsi/ncsi-pkt.h | 23 +-
net/ncsi/ncsi-rsp.c | 21 +-
net/netfilter/nft_socket.c | 5 +-
net/netfilter/nft_tunnel.c | 8 +-
net/netlabel/netlabel_kapi.c | 5 +
net/nfc/nci/uart.c | 8 +-
net/openvswitch/flow.c | 2 +-
net/sched/sch_ets.c | 10 +-
net/sched/sch_prio.c | 2 +-
net/sched/sch_red.c | 2 +-
net/sched/sch_sfq.c | 117 +++++---
net/sched/sch_tbf.c | 2 +-
net/sctp/socket.c | 3 +-
net/sunrpc/cache.c | 17 +-
net/tipc/crypto.c | 8 +-
net/tipc/udp_media.c | 4 +-
net/tls/tls_main.c | 4 +-
net/tls/tls_sw.c | 9 +-
scripts/Kbuild.include | 8 +-
scripts/Kconfig.include | 2 +-
scripts/as-version.sh | 2 +-
scripts/gcc-plugins/gcc-common.h | 32 +++
scripts/gcc-plugins/randomize_layout_plugin.c | 40 +--
security/selinux/xfrm.c | 2 +-
sound/pci/hda/hda_intel.c | 2 +
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/codecs/tas2770.c | 30 +-
sound/soc/meson/meson-card-utils.c | 2 +-
sound/soc/qcom/sdm845.c | 4 +
sound/soc/tegra/tegra210_ahub.c | 2 +
sound/usb/mixer_maps.c | 12 +
tools/include/uapi/linux/bpf.h | 2 +
tools/lib/bpf/nlattr.c | 15 +-
tools/perf/Makefile.config | 2 +
tools/perf/builtin-record.c | 2 +-
tools/perf/scripts/python/exported-sql-viewer.py | 5 +-
tools/perf/tests/switch-tracking.c | 2 +-
tools/perf/ui/browsers/hists.c | 2 +-
tools/testing/selftests/bpf/prog_tests/align.c | 36 +--
tools/testing/selftests/seccomp/seccomp_bpf.c | 7 +-
usr/include/Makefile | 2 +-
369 files changed, 3117 insertions(+), 1586 deletions(-)
1 month, 2 weeks
- 8
- 364
[PATCH 6.12 000/165] 6.12.39-rc2 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.12.39 release.
There are 165 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 17 Jul 2025 16:35:06 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.39-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.12.39-rc2
Michael Jeanson <mjeanson(a)efficios.com>
rseq: Fix segfault on registration when rseq_cs is non-zero
Lukas Wunner <lukas(a)wunner.de>
crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
Mark Brown <broonie(a)kernel.org>
arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: fix potential use-after-free in oplock/lease break ack
Yeoreum Yun <yeoreum.yun(a)arm.com>
kasan: remove kasan_find_vm_area() to prevent possible deadlock
Jiawen Wu <jiawenwu(a)trustnetic.com>
net: wangxun: revert the adjustment of the IRQ vector sequence
Gao Xiang <xiang(a)kernel.org>
erofs: fix rare pcluster memory leak after unmounting
Willem de Bruijn <willemb(a)google.com>
selftests/bpf: adapt one more case in test_lru_map to the new target_free
Daniel J. Ogorchock <djogorchock(a)gmail.com>
HID: nintendo: avoid bluetooth suspend/resume stalls
Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com>
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Zhang Heng <zhangheng(a)kylinos.cn>
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
Fangrui Song <i(a)maskray.me>
riscv: vdso: Exclude .rodata from the PT_DYNAMIC segment
Willem de Bruijn <willemb(a)google.com>
bpf: Adjust free target to avoid global starvation of LRU map
Nicolas Pitre <npitre(a)baylibre.com>
vt: add missing notification when switching back to text mode
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix assertion when building free space tree
Long Li <longli(a)microsoft.com>
net: mana: Record doorbell physical address in PF mode
Akira Inoue <niyarium(a)gmail.com>
HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
Shuai Zhang <quic_shuaz(a)quicinc.com>
driver: bluetooth: hci_qca:fix unable to load the BT driver
Xiaowei Li <xiaowei.li(a)simcom.com>
net: usb: qmi_wwan: add SIMCom 8230C composition
Tim Crawford <tcrawford(a)system76.com>
ALSA: hda/realtek: Add quirks for some Clevo laptops
Yasmin Fitzgerald <sunoflife1.git(a)gmail.com>
ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
Yuzuru10 <yuzuru_10(a)proton.me>
ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
Fengnan Chang <changfengnan(a)bytedance.com>
io_uring: make fallocate be hashed work
Takashi Iwai <tiwai(a)suse.de>
ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606
Tamura Dai <kirinode0(a)gmail.com>
ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.
Tiwei Bie <tiwei.btw(a)antgroup.com>
um: vector: Reduce stack usage in vector_eth_configure()
Thomas Fourier <fourier.thomas(a)gmail.com>
atm: idt77252: Add missing `dma_map_error()`
Ronnie Sahlberg <rsahlberg(a)whamcloud.com>
ublk: sanity check add_dev input for underflow
Somnath Kotur <somnath.kotur(a)broadcom.com>
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Fix DCB ETS validation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
Jianbo Liu <jianbol(a)nvidia.com>
net/mlx5e: Add new prio for promiscuous mode
Carolina Jubran <cjubran(a)nvidia.com>
net/mlx5e: Fix race between DIM disable and net_dim()
Sean Nyekjaer <sean(a)geanix.com>
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
Shuicheng Lin <shuicheng.lin(a)intel.com>
drm/xe/pm: Correct comment of xe_pm_set_vram_threshold()
Hangbin Liu <liuhangbin(a)gmail.com>
selftests: net: lib: fix shift count out of range
Petr Machata <petrm(a)nvidia.com>
selftests: net: lib: Move logging from forwarding/lib.sh here
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: microchip: Use genphy_soft_reset() to purge stale LPA bits
Mingming Cao <mmc(a)linux.ibm.com>
ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
Kito Xu <veritas501(a)foxmail.com>
net: appletalk: Fix device refcount leak in atrtr_create()
Eric Dumazet <edumazet(a)google.com>
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
Chao Yu <chao(a)kernel.org>
erofs: fix to add missing tracepoint in erofs_readahead()
Gao Xiang <xiang(a)kernel.org>
erofs: refine readahead tracepoint
Gao Xiang <xiang(a)kernel.org>
erofs: tidy up zdata.c
Gao Xiang <xiang(a)kernel.org>
erofs: get rid of `z_erofs_next_pcluster_t`
Chunhai Guo <guochunhai(a)vivo.com>
erofs: free pclusters if no cached folio is attached
Michal Wajdeczko <michal.wajdeczko(a)intel.com>
drm/xe/pf: Clear all LMTT pages on alloc
Zheng Qixing <zhengqixing(a)huawei.com>
nbd: fix uaf in nbd_genl_connect() error path
Henry Martin <bsdhenrymartin(a)gmail.com>
wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init()
Ben Skeggs <bskeggs(a)nvidia.com>
drm/nouveau/gsp: fix potential leak of memory used during acpi init
Felix Fietkau <nbd(a)nbd.name>
wifi: rt2x00: fix remove callback type mismatch
Johannes Berg <johannes.berg(a)intel.com>
wifi: mac80211: fix non-transmitted BSSID profile search
Lachlan Hodges <lachlan.hodges(a)morsemicro.com>
wifi: mac80211: correctly identify S1G short beacon
Nigel Croxon <ncroxon(a)redhat.com>
raid10: cleanup memleak at raid10_make_request
Wang Jinchao <wangjinchao600(a)gmail.com>
md/raid1: Fix stack memory use after return in raid1_reshape
Mikko Perttunen <mperttunen(a)nvidia.com>
drm/tegra: nvdec: Fix dma_alloc_coherent error check
Daniil Dulov <d.dulov(a)aladdin.ru>
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
Lachlan Hodges <lachlan.hodges(a)morsemicro.com>
wifi: cfg80211: fix S1G beacon head validation in nl80211
David Howells <dhowells(a)redhat.com>
netfs: Fix ref leak on inserted extra subreq in write retry
Jakub Kicinski <kuba(a)kernel.org>
netlink: make sure we allow at least one dump skb
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix rmem check in netlink_broadcast_deliver().
Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com>
ASoC: Intel: sof-function-topology-lib: Print out the unsupported dmic count
Gao Xiang <xiang(a)kernel.org>
erofs: address D-cache aliasing
Chao Yu <chao(a)kernel.org>
erofs: fix to add missing tracepoint in erofs_read_folio()
Al Viro <viro(a)zeniv.linux.org.uk>
ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
Stefan Metzmacher <metze(a)samba.org>
smb: server: make use of rdma_destroy_qp()
Sascha Hauer <s.hauer(a)pengutronix.de>
clk: scmi: Handle case where child clocks are initialized before their parents
Jann Horn <jannh(a)google.com>
x86/mm: Disable hugetlb page table sharing on 32-bit
Mikhail Paulyshka <me(a)mixaill.net>
x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
Xiaolei Wang <xiaolei.wang(a)windriver.com>
clk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data
Miguel Ojeda <ojeda(a)kernel.org>
rust: init: allow `dead_code` warnings for Rust >= 1.89.0
Harry Yoo <harry.yoo(a)oracle.com>
lib/alloc_tag: do not acquire non-existent lock in alloc_tag_top_users()
Alexander Gordeev <agordeev(a)linux.ibm.com>
mm/vmalloc: leave lazy MMU mode on PTE mapping error
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: fix interrupts.py after maple tree conversion
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: de-reference per-CPU MCE interrupts
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: fix interrupts display after MCP on x86
Baolin Wang <baolin.wang(a)linux.alibaba.com>
mm: fix the inaccurate memory statistics issue for users
Wei Yang <richard.weiyang(a)gmail.com>
maple_tree: fix mt_destroy_walk() on root leaf node
Achill Gilgenast <fossdd(a)pwned.life>
kallsyms: fix build without execinfo
Zhe Qiao <qiaozhe(a)iscas.ac.cn>
Revert "PCI/ACPI: Fix allocated memory release on error in pci_acpi_scan_root()"
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "ACPI: battery: negate current when discharging"
Matthew Brost <matthew.brost(a)intel.com>
drm/xe: Allocate PF queue size on pow2 boundary
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/framebuffer: Acquire internal references on GEM handles
Kuen-Han Tsai <khtsai(a)google.com>
Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
Kuen-Han Tsai <khtsai(a)google.com>
usb: gadget: u_serial: Fix race condition in TTY wakeup
Matthew Brost <matthew.brost(a)intel.com>
Revert "drm/xe/xe2: Enable Indirect Ring State support for Xe2"
Matthew Auld <matthew.auld(a)intel.com>
drm/xe/bmg: fix compressed VRAM handling
Simona Vetter <simona.vetter(a)ffwll.ch>
drm/gem: Fix race in drm_gem_handle_create_tail()
Christian König <christian.koenig(a)amd.com>
drm/ttm: fix error handling in ttm_buffer_object_transfer
Matthew Brost <matthew.brost(a)intel.com>
drm/sched: Increment job count before swapping tail spsc queue
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/gem: Acquire references on GEM handles for framebuffers
Philip Yang <Philip.Yang(a)amd.com>
drm/amdkfd: Don't call mmput from MMU notifier callback
Alessio Belle <alessio.belle(a)imgtec.com>
drm/imagination: Fix kernel crash when hard resetting the GPU
Michael Lo <michael.lo(a)mediatek.com>
wifi: mt76: mt7925: fix invalid array index in ssid assignment during hw scan
Ming Yen Hsieh <mingyen.hsieh(a)mediatek.com>
wifi: mt76: mt7925: fix the wrong config for tx interrupt
Deren Wu <deren.wu(a)mediatek.com>
wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload()
Deren Wu <deren.wu(a)mediatek.com>
wifi: mt76: mt7921: prevent decap offload config before STA initialization
Vitor Soares <vitor.soares(a)toradex.com>
wifi: mwifiex: discard erroneous disassoc frames on STA interface
Mathy Vanhoef <Mathy.Vanhoef(a)kuleuven.be>
wifi: prevent A-MSDU attacks in mesh networks
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Ensure to disable clocks in error path
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: Fix invalid state detection
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
Håkon Bugge <haakon.bugge(a)oracle.com>
md/md-bitmap: fix GPF in bitmap_get_stats()
Haoxiang Li <haoxiang_li2024(a)163.com>
net: ethernet: rtsn: Fix a null pointer dereference in rtsn_probe()
Guillaume Nault <gnault(a)redhat.com>
gre: Fix IPv6 multicast route creation.
Arun Raghavan <arun(a)asymptotic.io>
ASoC: fsl_sai: Force a software reset when starting in consumer mode
Thorsten Blum <thorsten.blum(a)linux.dev>
ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp()
Liam Merwick <liam.merwick(a)oracle.com>
KVM: Allow CPU to reschedule while setting per-page memory attributes
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
Nikunj A Dadhania <nikunj(a)amd.com>
KVM: SVM: Add missing member in SNP_LAUNCH_START command structure
David Woodhouse <dwmw(a)amazon.co.uk>
KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
JP Kobryn <inwardvessel(a)gmail.com>
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce: Ensure user polling settings are honored when restarting timer
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce: Don't remove sysfs if thresholding sysfs init fails
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Fix threshold limit reset
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Add default names for MCA banks and blocks
Dan Carpenter <dan.carpenter(a)linaro.org>
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
David Howells <dhowells(a)redhat.com>
rxrpc: Fix oops due to non-existence of prealloc backlog struct
David Howells <dhowells(a)redhat.com>
rxrpc: Fix bug due to prealloc collision
Victor Nogueira <victor(a)mojatatu.com>
net/sched: Abort __tc_modify_qdisc if parent class does not exist
Chintan Vankar <c-vankar(a)ti.com>
net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info
Yue Haibing <yuehaibing(a)huawei.com>
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix infinite recursive call of clip_push().
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix memory leak of struct clip_vcc.
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Force predictable MDI-X state on LAN87xx
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
EricChan <chenchuangyu(a)xiaomi.com>
net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_* TOCTOU
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_{g2h,h2g} TOCTOU
Jiayuan Chen <jiayuan.chen(a)linux.dev>
tcp: Correct signedness in skb remaining space calculation
Kuniyuki Iwashima <kuniyu(a)google.com>
tipc: Fix use-after-free in tipc_conn_close().
Stefano Garzarella <sgarzare(a)redhat.com>
vsock: fix `vsock_proto` declaration
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix wraparounds of sk->sk_rmem_alloc.
Luo Jie <quic_luoj(a)quicinc.com>
net: phy: qcom: qca808x: Fix WoL issue by utilizing at8031_set_wol()
Luo Jie <quic_luoj(a)quicinc.com>
net: phy: qcom: move the WoL function to shared library
Kevin Brodsky <kevin.brodsky(a)arm.com>
arm64: poe: Handle spurious Overlay faults
Jason Xing <kernelxing(a)tencent.com>
bnxt_en: eliminate the compile warning in bnxt_request_irq due to CONFIG_RFS_ACCEL
kuyo chang <kuyo.chang(a)mediatek.com>
sched/deadline: Fix dl_server runtime calculation formula
Al Viro <viro(a)zeniv.linux.org.uk>
fix proc_sys_compare() handling of in-lookup dentries
Mario Limonciello <mario.limonciello(a)amd.com>
pinctrl: amd: Clear GPIO debounce for suspend
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_sync: Fix not disabling advertising instance
Richard Fitzgerald <rf(a)opensource.cirrus.com>
ASoC: cs35l56: probe() should fail if the device ID is not recognized
Peter Zijlstra <peterz(a)infradead.org>
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Peter Zijlstra <peterz(a)infradead.org>
sched/core: Fix migrate_swap() vs. hotplug
Nam Cao <namcao(a)linutronix.de>
irqchip/irq-msi-lib: Select CONFIG_GENERIC_MSI_IRQ
Luo Gengkun <luogengkun(a)huaweicloud.com>
perf/core: Fix the WARN_ON_ONCE is out of lock protected region
Charles Keepax <ckeepax(a)opensource.cirrus.com>
ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: Intel: soc-acpi-intel-arl-match: set get_function_tplg_files ops
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: Intel: add sof_sdw_get_tplg_files ops
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: soc-acpi: add get_function_tplg_files ops
Simon Trimmer <simont(a)opensource.cirrus.com>
ASoC: Intel: soc-acpi: arl: Add match entries for new cs42l43 laptops
Simon Trimmer <simont(a)opensource.cirrus.com>
ASoC: Intel: soc-acpi: arl: Correct naming of a cs35l56 address struct
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: Intel: SND_SOC_INTEL_SOF_BOARD_HELPERS select SND_SOC_ACPI_INTEL_MATCH
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com>
drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
Eric Biggers <ebiggers(a)kernel.org>
crypto: s390/sha - Fix uninitialized variable in SHA-1 and SHA-2
Flora Cui <flora.cui(a)amd.com>
drm/amdgpu/ip_discovery: add missing ip_discovery fw
Flora Cui <flora.cui(a)amd.com>
drm/amdgpu/discovery: use specific ip_discovery.bin for legacy asics
Kaustabh Chakraborty <kauschluss(a)disroot.org>
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
Linus Torvalds <torvalds(a)linux-foundation.org>
eventpoll: don't decrement ep refcount while still holding the ep mutex
-------------
Diffstat:
Documentation/bpf/map_hash.rst | 8 +-
Documentation/bpf/map_lru_hash_update.dot | 6 +-
Makefile | 4 +-
arch/arm64/kernel/cpufeature.c | 45 ++--
arch/arm64/kernel/process.c | 5 +
arch/arm64/mm/fault.c | 30 ++-
arch/riscv/kernel/vdso/vdso.lds.S | 2 +-
arch/s390/crypto/sha1_s390.c | 2 +
arch/s390/crypto/sha256_s390.c | 3 +
arch/s390/crypto/sha512_s390.c | 3 +
arch/um/drivers/vector_kern.c | 42 ++--
arch/x86/Kconfig | 2 +-
arch/x86/include/asm/msr-index.h | 1 +
arch/x86/kernel/cpu/amd.c | 7 +
arch/x86/kernel/cpu/mce/amd.c | 28 ++-
arch/x86/kernel/cpu/mce/core.c | 24 +-
arch/x86/kernel/cpu/mce/intel.c | 1 +
arch/x86/kvm/svm/sev.c | 4 +
arch/x86/kvm/xen.c | 15 +-
crypto/ecc.c | 2 +-
drivers/acpi/battery.c | 19 +-
drivers/atm/idt77252.c | 5 +
drivers/block/nbd.c | 6 +-
drivers/block/ublk_drv.c | 3 +-
drivers/bluetooth/hci_qca.c | 13 +-
drivers/char/ipmi/ipmi_msghandler.c | 3 +-
drivers/clk/clk-scmi.c | 20 +-
drivers/clk/imx/clk-imx95-blk-ctl.c | 12 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 30 ++-
drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 5 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h | 3 +-
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 43 ++--
drivers/gpu/drm/drm_framebuffer.c | 31 ++-
drivers/gpu/drm/drm_gem.c | 74 +++++-
drivers/gpu/drm/drm_internal.h | 2 +
drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4 +
drivers/gpu/drm/imagination/pvr_power.c | 4 +-
drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c | 20 +-
drivers/gpu/drm/tegra/nvdec.c | 6 +-
drivers/gpu/drm/ttm/ttm_bo_util.c | 13 +-
drivers/gpu/drm/xe/xe_gt_pagefault.c | 1 +
drivers/gpu/drm/xe/xe_lmtt.c | 11 +
drivers/gpu/drm/xe/xe_migrate.c | 2 +-
drivers/gpu/drm/xe/xe_pci.c | 1 -
drivers/gpu/drm/xe/xe_pm.c | 8 +-
drivers/hid/hid-ids.h | 6 +
drivers/hid/hid-lenovo.c | 8 +
drivers/hid/hid-multitouch.c | 8 +-
drivers/hid/hid-nintendo.c | 38 +++-
drivers/hid/hid-quirks.c | 3 +
drivers/irqchip/Kconfig | 1 +
drivers/md/md-bitmap.c | 3 +-
drivers/md/raid1.c | 1 +
drivers/md/raid10.c | 10 +-
drivers/net/can/m_can/m_can.c | 2 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 10 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2 +
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +-
drivers/net/ethernet/ibm/ibmvnic.h | 8 +-
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 9 +-
drivers/net/ethernet/mellanox/mlx5/core/en_dim.c | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 13 +-
drivers/net/ethernet/microsoft/mana/gdma_main.c | 3 +
drivers/net/ethernet/renesas/rtsn.c | 5 +
drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c | 24 +-
drivers/net/ethernet/ti/am65-cpsw-nuss.c | 4 +-
drivers/net/ethernet/wangxun/libwx/wx_lib.c | 16 +-
drivers/net/ethernet/wangxun/libwx/wx_type.h | 2 +-
drivers/net/ethernet/wangxun/ngbe/ngbe_main.c | 2 +-
drivers/net/ethernet/wangxun/ngbe/ngbe_type.h | 2 +-
drivers/net/ethernet/wangxun/txgbe/txgbe_irq.c | 4 +-
drivers/net/ethernet/wangxun/txgbe/txgbe_type.h | 4 +-
drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
drivers/net/phy/microchip.c | 3 +-
drivers/net/phy/qcom/at803x.c | 27 ---
drivers/net/phy/qcom/qca808x.c | 2 +-
drivers/net/phy/qcom/qcom-phy-lib.c | 25 ++
drivers/net/phy/qcom/qcom.h | 5 +
drivers/net/phy/smsc.c | 57 ++++-
drivers/net/usb/qmi_wwan.c | 1 +
drivers/net/wireless/marvell/mwifiex/util.c | 4 +-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt7921/main.c | 3 +
drivers/net/wireless/mediatek/mt76/mt7925/init.c | 2 +
drivers/net/wireless/mediatek/mt76/mt7925/main.c | 6 +
drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt7925/regs.h | 2 +-
drivers/net/wireless/ralink/rt2x00/rt2x00soc.c | 4 +-
drivers/net/wireless/ralink/rt2x00/rt2x00soc.h | 2 +-
drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6 +-
drivers/pci/pci-acpi.c | 23 +-
drivers/pinctrl/pinctrl-amd.c | 11 +
drivers/pinctrl/qcom/pinctrl-msm.c | 20 ++
drivers/pwm/core.c | 2 +-
drivers/pwm/pwm-mediatek.c | 13 +-
drivers/tty/vt/vt.c | 1 +
drivers/usb/gadget/function/u_serial.c | 12 +-
fs/btrfs/free-space-tree.c | 16 +-
fs/erofs/data.c | 21 +-
fs/erofs/decompressor.c | 12 +-
fs/erofs/fileio.c | 6 +-
fs/erofs/internal.h | 2 +-
fs/erofs/zdata.c | 251 +++++++++-----------
fs/erofs/zutil.c | 7 +-
fs/eventpoll.c | 12 +-
fs/netfs/write_collect.c | 2 +-
fs/proc/inode.c | 2 +-
fs/proc/proc_sysctl.c | 18 +-
fs/proc/task_mmu.c | 14 +-
fs/smb/server/smb2pdu.c | 29 +--
fs/smb/server/transport_rdma.c | 5 +-
fs/smb/server/vfs.c | 1 +
include/drm/drm_file.h | 3 +
include/drm/drm_framebuffer.h | 7 +
include/drm/spsc_queue.h | 4 +-
include/linux/ieee80211.h | 45 +++-
include/linux/math.h | 12 +
include/linux/mm.h | 5 +
include/linux/psp-sev.h | 2 +
include/net/af_vsock.h | 2 +-
include/net/netfilter/nf_flow_table.h | 2 +-
include/sound/soc-acpi.h | 13 ++
include/trace/events/erofs.h | 2 +-
io_uring/opdef.c | 1 +
kernel/bpf/bpf_lru_list.c | 9 +-
kernel/bpf/bpf_lru_list.h | 1 +
kernel/events/core.c | 6 +-
kernel/rseq.c | 60 ++++-
kernel/sched/core.c | 5 +
kernel/sched/deadline.c | 10 +-
kernel/stop_machine.c | 20 +-
lib/alloc_tag.c | 3 +
lib/maple_tree.c | 1 +
mm/kasan/report.c | 13 +-
mm/vmalloc.c | 22 +-
net/appletalk/ddp.c | 1 +
net/atm/clip.c | 64 ++++--
net/bluetooth/hci_event.c | 3 +
net/bluetooth/hci_sync.c | 2 +-
net/ipv4/tcp.c | 2 +-
net/ipv6/addrconf.c | 9 +-
net/mac80211/mlme.c | 7 +-
net/mac80211/parse.c | 6 +-
net/netlink/af_netlink.c | 90 +++++---
net/rxrpc/call_accept.c | 4 +
net/sched/sch_api.c | 23 +-
net/tipc/topsrv.c | 2 +
net/vmw_vsock/af_vsock.c | 57 ++++-
net/wireless/nl80211.c | 7 +-
net/wireless/util.c | 52 ++++-
rust/kernel/init/macros.rs | 2 +
scripts/gdb/linux/constants.py.in | 7 +
scripts/gdb/linux/interrupts.py | 16 +-
scripts/gdb/linux/mapletree.py | 252 +++++++++++++++++++++
scripts/gdb/linux/xarray.py | 28 +++
sound/isa/ad1816a/ad1816a.c | 2 +-
sound/pci/hda/patch_realtek.c | 7 +
sound/soc/amd/yc/acp6x-mach.c | 7 +
sound/soc/codecs/cs35l56-shared.c | 2 +-
sound/soc/fsl/fsl_asrc.c | 3 +-
sound/soc/fsl/fsl_sai.c | 14 +-
sound/soc/intel/boards/Kconfig | 1 +
sound/soc/intel/common/Makefile | 2 +-
sound/soc/intel/common/soc-acpi-intel-arl-match.c | 66 +++++-
sound/soc/intel/common/sof-function-topology-lib.c | 136 +++++++++++
sound/soc/intel/common/sof-function-topology-lib.h | 15 ++
sound/soc/sof/intel/hda.c | 6 +-
tools/arch/x86/include/asm/msr-index.h | 1 +
tools/include/linux/kallsyms.h | 4 +
tools/testing/selftests/bpf/test_lru_map.c | 105 ++++-----
tools/testing/selftests/net/forwarding/lib.sh | 113 ---------
tools/testing/selftests/net/lib.sh | 115 ++++++++++
virt/kvm/kvm_main.c | 3 +
175 files changed, 2014 insertions(+), 880 deletions(-)
1 month, 2 weeks
- 10
- 9
[PATCH 6.15 000/192] 6.15.7-rc1 review
by Greg Kroah-Hartman
This is the start of the stable review cycle for the 6.15.7 release.
There are 192 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 17 Jul 2025 13:07:32 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.15.7-rc1…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.15.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.15.7-rc1
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: fix potential use-after-free in oplock/lease break ack
Nikunj A Dadhania <nikunj(a)amd.com>
x86/sev: Use TSC_FACTOR for Secure TSC frequency calculation
Jiawen Wu <jiawenwu(a)trustnetic.com>
net: wangxun: revert the adjustment of the IRQ vector sequence
Willem de Bruijn <willemb(a)google.com>
selftests/bpf: adapt one more case in test_lru_map to the new target_free
Daniel J. Ogorchock <djogorchock(a)gmail.com>
HID: nintendo: avoid bluetooth suspend/resume stalls
Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com>
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Zhang Heng <zhangheng(a)kylinos.cn>
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
Fangrui Song <i(a)maskray.me>
riscv: vdso: Exclude .rodata from the PT_DYNAMIC segment
Willem de Bruijn <willemb(a)google.com>
bpf: Adjust free target to avoid global starvation of LRU map
Nicolas Pitre <npitre(a)baylibre.com>
vt: add missing notification when switching back to text mode
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix assertion when building free space tree
Long Li <longli(a)microsoft.com>
net: mana: Record doorbell physical address in PF mode
Akira Inoue <niyarium(a)gmail.com>
HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
Shuai Zhang <quic_shuaz(a)quicinc.com>
driver: bluetooth: hci_qca:fix unable to load the BT driver
Xiaowei Li <xiaowei.li(a)simcom.com>
net: usb: qmi_wwan: add SIMCom 8230C composition
Tim Crawford <tcrawford(a)system76.com>
ALSA: hda/realtek: Add quirks for some Clevo laptops
Yasmin Fitzgerald <sunoflife1.git(a)gmail.com>
ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
Yuzuru10 <yuzuru_10(a)proton.me>
ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
Fengnan Chang <changfengnan(a)bytedance.com>
io_uring: make fallocate be hashed work
Chris Chiu <chris.chiu(a)canonical.com>
ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 6 G1a
Takashi Iwai <tiwai(a)suse.de>
ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606
Jack Yu <jack.yu(a)realtek.com>
ASoC: rt721-sdca: fix boost gain calculation error
Tamura Dai <kirinode0(a)gmail.com>
ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.
Tiwei Bie <tiwei.btw(a)antgroup.com>
um: vector: Reduce stack usage in vector_eth_configure()
Thomas Fourier <fourier.thomas(a)gmail.com>
atm: idt77252: Add missing `dma_map_error()`
Ronnie Sahlberg <rsahlberg(a)whamcloud.com>
ublk: sanity check add_dev input for underflow
Somnath Kotur <somnath.kotur(a)broadcom.com>
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
Shruti Parab <shruti.parab(a)broadcom.com>
bnxt_en: Flush FW trace before copying to the coredump
Shravya KN <shravya.k-n(a)broadcom.com>
bnxt_en: Fix DCB ETS validation
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
Jianbo Liu <jianbol(a)nvidia.com>
net/mlx5e: Add new prio for promiscuous mode
Carolina Jubran <cjubran(a)nvidia.com>
net/mlx5e: Fix race between DIM disable and net_dim()
Carolina Jubran <cjubran(a)nvidia.com>
net/mlx5: Reset bw_share field when changing a node's parent
Sean Nyekjaer <sean(a)geanix.com>
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
Shuicheng Lin <shuicheng.lin(a)intel.com>
drm/xe/pm: Correct comment of xe_pm_set_vram_threshold()
Shuicheng Lin <shuicheng.lin(a)intel.com>
drm/xe/pm: Restore display pm if there is error after display suspend
Hangbin Liu <liuhangbin(a)gmail.com>
selftests: net: lib: fix shift count out of range
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: microchip: Use genphy_soft_reset() to purge stale LPA bits
Mingming Cao <mmc(a)linux.ibm.com>
ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
Kito Xu <veritas501(a)foxmail.com>
net: appletalk: Fix device refcount leak in atrtr_create()
Eric Dumazet <edumazet(a)google.com>
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
Miri Korenblit <miriam.rachel.korenblit(a)intel.com>
wifi: mac80211: add the virtual monitor after reconfig complete
Chao Yu <chao(a)kernel.org>
erofs: fix to add missing tracepoint in erofs_readahead()
Gao Xiang <xiang(a)kernel.org>
erofs: refine readahead tracepoint
Michal Wajdeczko <michal.wajdeczko(a)intel.com>
drm/xe/pf: Clear all LMTT pages on alloc
Pankaj Raghav <p.raghav(a)samsung.com>
block: reject bs > ps block devices when THP is disabled
Zheng Qixing <zhengqixing(a)huawei.com>
nbd: fix uaf in nbd_genl_connect() error path
Henry Martin <bsdhenrymartin(a)gmail.com>
wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init()
Lorenzo Bianconi <lorenzo(a)kernel.org>
wifi: mt76: Remove RCU section in mt7996_mac_sta_rc_work()
Lorenzo Bianconi <lorenzo(a)kernel.org>
wifi: mt76: Move RCU section in mt7996_mcu_add_rate_ctrl()
Lorenzo Bianconi <lorenzo(a)kernel.org>
wifi: mt76: Move RCU section in mt7996_mcu_add_rate_ctrl_fixed()
Lorenzo Bianconi <lorenzo(a)kernel.org>
wifi: mt76: Move RCU section in mt7996_mcu_set_fixed_field()
Lorenzo Bianconi <lorenzo(a)kernel.org>
wifi: mt76: Assume __mt76_connac_mcu_alloc_sta_req runs in atomic context
Ben Skeggs <bskeggs(a)nvidia.com>
drm/nouveau/gsp: fix potential leak of memory used during acpi init
Pavel Begunkov <asml.silence(a)gmail.com>
io_uring/zcrx: fix pp destruction warnings
Felix Fietkau <nbd(a)nbd.name>
wifi: rt2x00: fix remove callback type mismatch
Moon Hee Lee <moonhee.lee.ca(a)gmail.com>
wifi: mac80211: reject VHT opmode for unsupported channel widths
Johannes Berg <johannes.berg(a)intel.com>
wifi: mac80211: fix non-transmitted BSSID profile search
Lachlan Hodges <lachlan.hodges(a)morsemicro.com>
wifi: mac80211: correctly identify S1G short beacon
Zheng Qixing <zhengqixing(a)huawei.com>
md/raid1,raid10: strip REQ_NOWAIT from member bios
Nigel Croxon <ncroxon(a)redhat.com>
raid10: cleanup memleak at raid10_make_request
Wang Jinchao <wangjinchao600(a)gmail.com>
md/raid1: Fix stack memory use after return in raid1_reshape
Mikko Perttunen <mperttunen(a)nvidia.com>
drm/tegra: nvdec: Fix dma_alloc_coherent error check
Daniil Dulov <d.dulov(a)aladdin.ru>
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
Lachlan Hodges <lachlan.hodges(a)morsemicro.com>
wifi: cfg80211: fix S1G beacon head validation in nl80211
Jakub Kicinski <kuba(a)kernel.org>
netlink: make sure we allow at least one dump skb
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix rmem check in netlink_broadcast_deliver().
Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com>
ASoC: Intel: sof-function-topology-lib: Print out the unsupported dmic count
Gao Xiang <xiang(a)kernel.org>
erofs: fix large fragment handling
Gao Xiang <xiang(a)kernel.org>
erofs: address D-cache aliasing
Chao Yu <chao(a)kernel.org>
erofs: fix to add missing tracepoint in erofs_read_folio()
Al Viro <viro(a)zeniv.linux.org.uk>
ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
Stefan Metzmacher <metze(a)samba.org>
smb: server: make use of rdma_destroy_qp()
Sascha Hauer <s.hauer(a)pengutronix.de>
clk: scmi: Handle case where child clocks are initialized before their parents
Julien Massot <julien.massot(a)collabora.com>
dt-bindings: clock: mediatek: Add #reset-cells property for MT8188
Mikhail Paulyshka <me(a)mixaill.net>
x86/CPU/AMD: Disable INVLPGB on Zen2
Jann Horn <jannh(a)google.com>
x86/mm: Disable hugetlb page table sharing on 32-bit
Mikhail Paulyshka <me(a)mixaill.net>
x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
Xiaolei Wang <xiaolei.wang(a)windriver.com>
clk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data
Harry Yoo <harry.yoo(a)oracle.com>
lib/alloc_tag: do not acquire non-existent lock in alloc_tag_top_users()
Honggyu Kim <honggyu.kim(a)sk.com>
samples/damon: fix damon sample wsse for start failure
Honggyu Kim <honggyu.kim(a)sk.com>
samples/damon: fix damon sample prcl for start failure
Honggyu Kim <honggyu.kim(a)sk.com>
mm/damon: fix divide by zero in damon_get_intervals_score()
SeongJae Park <sj(a)kernel.org>
mm/damon/core: handle damon_call_control as normal under kdmond deactivation
Lance Yang <lance.yang(a)linux.dev>
mm/rmap: fix potential out-of-bounds page table access during batched unmap
Alexander Gordeev <agordeev(a)linux.ibm.com>
mm/vmalloc: leave lazy MMU mode on PTE mapping error
Illia Ostapyshyn <illia(a)yshyn.com>
scripts: gdb: vfs: support external dentry names
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: fix interrupts.py after maple tree conversion
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: de-reference per-CPU MCE interrupts
Florian Fainelli <florian.fainelli(a)broadcom.com>
scripts/gdb: fix interrupts display after MCP on x86
Baolin Wang <baolin.wang(a)linux.alibaba.com>
mm: fix the inaccurate memory statistics issue for users
Wei Yang <richard.weiyang(a)gmail.com>
maple_tree: fix mt_destroy_walk() on root leaf node
Yeoreum Yun <yeoreum.yun(a)arm.com>
kasan: remove kasan_find_vm_area() to prevent possible deadlock
Achill Gilgenast <fossdd(a)pwned.life>
kallsyms: fix build without execinfo
Zhe Qiao <qiaozhe(a)iscas.ac.cn>
Revert "PCI/ACPI: Fix allocated memory release on error in pci_acpi_scan_root()"
Rafael J. Wysocki <rafael.j.wysocki(a)intel.com>
Revert "ACPI: battery: negate current when discharging"
Matthew Brost <matthew.brost(a)intel.com>
drm/xe: Allocate PF queue size on pow2 boundary
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/framebuffer: Acquire internal references on GEM handles
Kuen-Han Tsai <khtsai(a)google.com>
Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
Kuen-Han Tsai <khtsai(a)google.com>
usb: gadget: u_serial: Fix race condition in TTY wakeup
Aaron Thompson <dev(a)aaront.org>
drm/nouveau: Do not fail module init on debugfs errors
Matthew Brost <matthew.brost(a)intel.com>
Revert "drm/xe/xe2: Enable Indirect Ring State support for Xe2"
Matthew Auld <matthew.auld(a)intel.com>
drm/xe/bmg: fix compressed VRAM handling
Simona Vetter <simona.vetter(a)ffwll.ch>
drm/gem: Fix race in drm_gem_handle_create_tail()
Christian König <christian.koenig(a)amd.com>
drm/ttm: fix error handling in ttm_buffer_object_transfer
Matthew Brost <matthew.brost(a)intel.com>
drm/sched: Increment job count before swapping tail spsc queue
Thomas Zimmermann <tzimmermann(a)suse.de>
drm/gem: Acquire references on GEM handles for framebuffers
Alex Deucher <alexander.deucher(a)amd.com>
drm/amdkfd: add hqd_sdma_get_doorbell callbacks for gfx7/8
Kent Russell <kent.russell(a)amd.com>
drm/amdgpu: Include sdma_4_4_4.bin
Philip Yang <Philip.Yang(a)amd.com>
drm/amdkfd: Don't call mmput from MMU notifier callback
Alessio Belle <alessio.belle(a)imgtec.com>
drm/imagination: Fix kernel crash when hard resetting the GPU
Michael Lo <michael.lo(a)mediatek.com>
wifi: mt76: mt7925: fix invalid array index in ssid assignment during hw scan
Ming Yen Hsieh <mingyen.hsieh(a)mediatek.com>
wifi: mt76: mt7925: fix the wrong config for tx interrupt
Deren Wu <deren.wu(a)mediatek.com>
wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload()
Deren Wu <deren.wu(a)mediatek.com>
wifi: mt76: mt7921: prevent decap offload config before STA initialization
Vitor Soares <vitor.soares(a)toradex.com>
wifi: mwifiex: discard erroneous disassoc frames on STA interface
Mathy Vanhoef <Mathy.Vanhoef(a)kuleuven.be>
wifi: prevent A-MSDU attacks in mesh networks
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: mediatek: Ensure to disable clocks in error path
Uwe Kleine-König <u.kleine-koenig(a)baylibre.com>
pwm: Fix invalid state detection
Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org>
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
Miquel Raynal <miquel.raynal(a)bootlin.com>
pinctrl: nuvoton: Fix boot on ma35dx platforms
Håkon Bugge <haakon.bugge(a)oracle.com>
md/md-bitmap: fix GPF in bitmap_get_stats()
Hugo Villeneuve <hvilleneuve(a)dimonoff.com>
gpiolib: fix performance regression when using gpio_chip_get_multiple()
Haoxiang Li <haoxiang_li2024(a)163.com>
net: ethernet: rtsn: Fix a null pointer dereference in rtsn_probe()
Guillaume Nault <gnault(a)redhat.com>
gre: Fix IPv6 multicast route creation.
Jens Axboe <axboe(a)kernel.dk>
io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU
Arun Raghavan <arun(a)asymptotic.io>
ASoC: fsl_sai: Force a software reset when starting in consumer mode
Mark Brown <broonie(a)kernel.org>
arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
Edip Hazuri <edip(a)medip.dev>
ALSA: hda/realtek - Add mute LED support for HP Victus 15-fb2xxx
Thorsten Blum <thorsten.blum(a)linux.dev>
ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp()
Thomas Weißschuh <thomas.weissschuh(a)linutronix.de>
sched: Fix preemption string of preempt_dynamic_none
Liam Merwick <liam.merwick(a)oracle.com>
KVM: Allow CPU to reschedule while setting per-page memory attributes
Sean Christopherson <seanjc(a)google.com>
KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
Nikunj A Dadhania <nikunj(a)amd.com>
KVM: SVM: Add missing member in SNP_LAUNCH_START command structure
Manuel Andreas <manuel.andreas(a)tum.de>
KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush
David Woodhouse <dwmw(a)amazon.co.uk>
KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
JP Kobryn <inwardvessel(a)gmail.com>
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce: Ensure user polling settings are honored when restarting timer
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce: Don't remove sysfs if thresholding sysfs init fails
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Fix threshold limit reset
Yazen Ghannam <yazen.ghannam(a)amd.com>
x86/mce/amd: Add default names for MCA banks and blocks
Dan Carpenter <dan.carpenter(a)linaro.org>
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
David Howells <dhowells(a)redhat.com>
rxrpc: Fix oops due to non-existence of prealloc backlog struct
Eric Biggers <ebiggers(a)kernel.org>
crypto: s390/sha - Fix uninitialized variable in SHA-1 and SHA-2
David Howells <dhowells(a)redhat.com>
rxrpc: Fix bug due to prealloc collision
Victor Nogueira <victor(a)mojatatu.com>
net/sched: Abort __tc_modify_qdisc if parent class does not exist
Chintan Vankar <c-vankar(a)ti.com>
net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info
Yue Haibing <yuehaibing(a)huawei.com>
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix infinite recursive call of clip_push().
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix memory leak of struct clip_vcc.
Kuniyuki Iwashima <kuniyu(a)google.com>
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Force predictable MDI-X state on LAN87xx
Oleksij Rempel <o.rempel(a)pengutronix.de>
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
EricChan <chenchuangyu(a)xiaomi.com>
net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
Petr Pavlu <petr.pavlu(a)suse.com>
module: Fix memory deallocation on error path in move_module()
Christophe JAILLET <christophe.jaillet(a)wanadoo.fr>
net: airoha: Fix an error handling path in airoha_probe()
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_* TOCTOU
Michal Luczaj <mhal(a)rbox.co>
vsock: Fix transport_{g2h,h2g} TOCTOU
Jiayuan Chen <jiayuan.chen(a)linux.dev>
tcp: Correct signedness in skb remaining space calculation
Kuniyuki Iwashima <kuniyu(a)google.com>
tipc: Fix use-after-free in tipc_conn_close().
Stefano Garzarella <sgarzare(a)redhat.com>
vsock: fix `vsock_proto` declaration
Kuniyuki Iwashima <kuniyu(a)google.com>
netlink: Fix wraparounds of sk->sk_rmem_alloc.
Luo Jie <quic_luoj(a)quicinc.com>
net: phy: qcom: qca808x: Fix WoL issue by utilizing at8031_set_wol()
Luo Jie <quic_luoj(a)quicinc.com>
net: phy: qcom: move the WoL function to shared library
Anshuman Khandual <anshuman.khandual(a)arm.com>
arm64/mm: Drop wrong writes into TCR2_EL1
Kevin Brodsky <kevin.brodsky(a)arm.com>
arm64: poe: Handle spurious Overlay faults
Jason Xing <kernelxing(a)tencent.com>
bnxt_en: eliminate the compile warning in bnxt_request_irq due to CONFIG_RFS_ACCEL
kuyo chang <kuyo.chang(a)mediatek.com>
sched/deadline: Fix dl_server runtime calculation formula
Al Viro <viro(a)zeniv.linux.org.uk>
fix proc_sys_compare() handling of in-lookup dentries
Mario Limonciello <mario.limonciello(a)amd.com>
pinctrl: amd: Clear GPIO debounce for suspend
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: hci_sync: Fix not disabling advertising instance
Richard Fitzgerald <rf(a)opensource.cirrus.com>
ASoC: cs35l56: probe() should fail if the device ID is not recognized
Peter Zijlstra <peterz(a)infradead.org>
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
Heiko Carstens <hca(a)linux.ibm.com>
objtool: Add missing endian conversion to read_annotate()
Peter Zijlstra <peterz(a)infradead.org>
sched/core: Fix migrate_swap() vs. hotplug
Nam Cao <namcao(a)linutronix.de>
irqchip/irq-msi-lib: Select CONFIG_GENERIC_MSI_IRQ
Shiju Jose <shiju.jose(a)huawei.com>
EDAC: Initialize EDAC features sysfs attributes
Luo Gengkun <luogengkun(a)huaweicloud.com>
perf/core: Fix the WARN_ON_ONCE is out of lock protected region
Charles Keepax <ckeepax(a)opensource.cirrus.com>
ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: Intel: soc-acpi-intel-arl-match: set get_function_tplg_files ops
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: Intel: add sof_sdw_get_tplg_files ops
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: soc-acpi: add get_function_tplg_files ops
Bard Liao <yung-chuan.liao(a)linux.intel.com>
ASoC: Intel: SND_SOC_INTEL_SOF_BOARD_HELPERS select SND_SOC_ACPI_INTEL_MATCH
Shengjiu Wang <shengjiu.wang(a)nxp.com>
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
Kaustabh Chakraborty <kauschluss(a)disroot.org>
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
Linus Torvalds <torvalds(a)linux-foundation.org>
eventpoll: don't decrement ep refcount while still holding the ep mutex
-------------
Diffstat:
Documentation/bpf/map_hash.rst | 8 +-
Documentation/bpf/map_lru_hash_update.dot | 6 +-
.../bindings/clock/mediatek,mt8188-clock.yaml | 3 +
Makefile | 4 +-
arch/arm64/kernel/cpufeature.c | 57 +++--
arch/arm64/kernel/process.c | 5 +
arch/arm64/mm/fault.c | 30 ++-
arch/arm64/mm/proc.S | 1 -
arch/riscv/kernel/vdso/vdso.lds.S | 2 +-
arch/s390/crypto/sha1_s390.c | 2 +
arch/s390/crypto/sha256_s390.c | 3 +
arch/s390/crypto/sha512_s390.c | 3 +
arch/um/drivers/vector_kern.c | 42 ++--
arch/x86/Kconfig | 2 +-
arch/x86/coco/sev/core.c | 22 +-
arch/x86/include/asm/msr-index.h | 1 +
arch/x86/include/asm/sev.h | 17 +-
arch/x86/kernel/cpu/amd.c | 10 +
arch/x86/kernel/cpu/mce/amd.c | 28 ++-
arch/x86/kernel/cpu/mce/core.c | 24 +-
arch/x86/kernel/cpu/mce/intel.c | 1 +
arch/x86/kvm/hyperv.c | 3 +
arch/x86/kvm/svm/sev.c | 4 +
arch/x86/kvm/xen.c | 15 +-
drivers/acpi/battery.c | 19 +-
drivers/atm/idt77252.c | 5 +
drivers/block/nbd.c | 6 +-
drivers/block/ublk_drv.c | 3 +-
drivers/bluetooth/hci_qca.c | 13 +-
drivers/char/ipmi/ipmi_msghandler.c | 3 +-
drivers/clk/clk-scmi.c | 20 +-
drivers/clk/imx/clk-imx95-blk-ctl.c | 12 +-
drivers/edac/ecs.c | 4 +-
drivers/edac/mem_repair.c | 1 +
drivers/edac/scrub.c | 1 +
drivers/gpio/gpiolib.c | 5 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v7.c | 8 +
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v8.c | 8 +
drivers/gpu/drm/amd/amdgpu/sdma_v4_4_2.c | 1 +
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 43 ++--
drivers/gpu/drm/drm_framebuffer.c | 31 ++-
drivers/gpu/drm/drm_gem.c | 74 +++++-
drivers/gpu/drm/drm_internal.h | 2 +
drivers/gpu/drm/exynos/exynos7_drm_decon.c | 4 +
drivers/gpu/drm/imagination/pvr_power.c | 4 +-
drivers/gpu/drm/nouveau/nouveau_debugfs.c | 6 +-
drivers/gpu/drm/nouveau/nouveau_debugfs.h | 5 +-
drivers/gpu/drm/nouveau/nouveau_drm.c | 4 +-
drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c | 20 +-
drivers/gpu/drm/tegra/nvdec.c | 6 +-
drivers/gpu/drm/ttm/ttm_bo_util.c | 13 +-
drivers/gpu/drm/xe/xe_gt_pagefault.c | 1 +
drivers/gpu/drm/xe/xe_lmtt.c | 11 +
drivers/gpu/drm/xe/xe_migrate.c | 2 +-
drivers/gpu/drm/xe/xe_pci.c | 1 -
drivers/gpu/drm/xe/xe_pm.c | 11 +-
drivers/hid/hid-ids.h | 6 +
drivers/hid/hid-lenovo.c | 8 +
drivers/hid/hid-multitouch.c | 8 +-
drivers/hid/hid-nintendo.c | 38 +++-
drivers/hid/hid-quirks.c | 3 +
drivers/irqchip/Kconfig | 1 +
drivers/md/md-bitmap.c | 3 +-
drivers/md/raid1.c | 4 +-
drivers/md/raid10.c | 12 +-
drivers/net/can/m_can/m_can.c | 2 +-
drivers/net/ethernet/airoha/airoha_eth.c | 1 +
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 10 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_coredump.c | 18 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2 +
drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +-
drivers/net/ethernet/ibm/ibmvnic.h | 8 +-
drivers/net/ethernet/mellanox/mlx5/core/en/fs.h | 9 +-
drivers/net/ethernet/mellanox/mlx5/core/en_dim.c | 4 +-
drivers/net/ethernet/mellanox/mlx5/core/en_fs.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c | 1 +
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 13 +-
drivers/net/ethernet/microsoft/mana/gdma_main.c | 3 +
drivers/net/ethernet/renesas/rtsn.c | 5 +
drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c | 24 +-
drivers/net/ethernet/ti/am65-cpsw-nuss.c | 4 +-
drivers/net/ethernet/wangxun/libwx/wx_lib.c | 16 +-
drivers/net/ethernet/wangxun/libwx/wx_type.h | 2 +-
drivers/net/ethernet/wangxun/ngbe/ngbe_main.c | 2 +-
drivers/net/ethernet/wangxun/ngbe/ngbe_type.h | 2 +-
drivers/net/ethernet/wangxun/txgbe/txgbe_irq.c | 4 +-
drivers/net/ethernet/wangxun/txgbe/txgbe_type.h | 4 +-
drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
drivers/net/phy/microchip.c | 3 +-
drivers/net/phy/qcom/at803x.c | 27 ---
drivers/net/phy/qcom/qca808x.c | 2 +-
drivers/net/phy/qcom/qcom-phy-lib.c | 25 ++
drivers/net/phy/qcom/qcom.h | 5 +
drivers/net/phy/smsc.c | 57 ++++-
drivers/net/usb/qmi_wwan.c | 1 +
drivers/net/wireless/marvell/mwifiex/util.c | 4 +-
.../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 6 +-
drivers/net/wireless/mediatek/mt76/mt7921/main.c | 3 +
drivers/net/wireless/mediatek/mt76/mt7925/init.c | 2 +
drivers/net/wireless/mediatek/mt76/mt7925/main.c | 6 +
drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 4 +-
drivers/net/wireless/mediatek/mt76/mt7925/regs.h | 2 +-
drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 40 +---
drivers/net/wireless/mediatek/mt76/mt7996/main.c | 5 +-
drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 188 ++++++++++-----
drivers/net/wireless/mediatek/mt76/mt7996/mt7996.h | 16 +-
drivers/net/wireless/ralink/rt2x00/rt2x00soc.c | 4 +-
drivers/net/wireless/ralink/rt2x00/rt2x00soc.h | 2 +-
drivers/net/wireless/zydas/zd1211rw/zd_mac.c | 6 +-
drivers/pci/pci-acpi.c | 23 +-
drivers/pinctrl/nuvoton/pinctrl-ma35.c | 10 +-
drivers/pinctrl/pinctrl-amd.c | 11 +
drivers/pinctrl/qcom/pinctrl-msm.c | 20 ++
drivers/pwm/core.c | 2 +-
drivers/pwm/pwm-mediatek.c | 13 +-
drivers/tty/vt/vt.c | 1 +
drivers/usb/gadget/function/u_serial.c | 12 +-
fs/btrfs/free-space-tree.c | 16 +-
fs/erofs/data.c | 21 +-
fs/erofs/decompressor.c | 12 +-
fs/erofs/fileio.c | 6 +-
fs/erofs/internal.h | 6 +-
fs/erofs/zdata.c | 13 +-
fs/erofs/zmap.c | 9 +-
fs/eventpoll.c | 12 +-
fs/proc/inode.c | 2 +-
fs/proc/proc_sysctl.c | 18 +-
fs/proc/task_mmu.c | 14 +-
fs/smb/server/smb2pdu.c | 29 +--
fs/smb/server/transport_rdma.c | 5 +-
fs/smb/server/vfs.c | 1 +
include/drm/drm_file.h | 3 +
include/drm/drm_framebuffer.h | 7 +
include/drm/spsc_queue.h | 4 +-
include/linux/blkdev.h | 5 +
include/linux/ieee80211.h | 45 +++-
include/linux/io_uring_types.h | 2 +
include/linux/mm.h | 5 +
include/linux/psp-sev.h | 2 +
include/net/af_vsock.h | 2 +-
include/net/bluetooth/hci_core.h | 3 +-
include/net/netfilter/nf_flow_table.h | 2 +-
include/sound/soc-acpi.h | 13 ++
include/trace/events/erofs.h | 2 +-
io_uring/msg_ring.c | 4 +-
io_uring/opdef.c | 1 +
io_uring/zcrx.c | 3 -
kernel/bpf/bpf_lru_list.c | 9 +-
kernel/bpf/bpf_lru_list.h | 1 +
kernel/events/core.c | 6 +-
kernel/module/main.c | 4 +-
kernel/sched/core.c | 7 +-
kernel/sched/deadline.c | 10 +-
kernel/stop_machine.c | 20 +-
lib/alloc_tag.c | 3 +
lib/maple_tree.c | 1 +
mm/damon/core.c | 8 +-
mm/kasan/report.c | 45 +---
mm/rmap.c | 46 ++--
mm/vmalloc.c | 22 +-
net/appletalk/ddp.c | 1 +
net/atm/clip.c | 64 ++++--
net/bluetooth/hci_event.c | 3 +
net/bluetooth/hci_sync.c | 4 +-
net/ipv4/tcp.c | 2 +-
net/ipv6/addrconf.c | 9 +-
net/mac80211/cfg.c | 14 ++
net/mac80211/mlme.c | 7 +-
net/mac80211/parse.c | 6 +-
net/mac80211/util.c | 9 +-
net/netlink/af_netlink.c | 90 +++++---
net/rxrpc/call_accept.c | 4 +
net/sched/sch_api.c | 23 +-
net/tipc/topsrv.c | 2 +
net/vmw_vsock/af_vsock.c | 57 ++++-
net/wireless/nl80211.c | 7 +-
net/wireless/util.c | 52 ++++-
samples/damon/prcl.c | 8 +-
samples/damon/wsse.c | 8 +-
scripts/gdb/linux/constants.py.in | 7 +
scripts/gdb/linux/interrupts.py | 16 +-
scripts/gdb/linux/mapletree.py | 252 +++++++++++++++++++++
scripts/gdb/linux/vfs.py | 2 +-
scripts/gdb/linux/xarray.py | 28 +++
sound/isa/ad1816a/ad1816a.c | 2 +-
sound/pci/hda/patch_realtek.c | 10 +
sound/soc/amd/yc/acp6x-mach.c | 7 +
sound/soc/codecs/cs35l56-shared.c | 2 +-
sound/soc/codecs/rt721-sdca.c | 23 +-
sound/soc/fsl/fsl_asrc.c | 3 +-
sound/soc/fsl/fsl_sai.c | 14 +-
sound/soc/intel/boards/Kconfig | 1 +
sound/soc/intel/common/Makefile | 2 +-
sound/soc/intel/common/soc-acpi-intel-arl-match.c | 21 +-
sound/soc/intel/common/sof-function-topology-lib.c | 136 +++++++++++
sound/soc/intel/common/sof-function-topology-lib.h | 15 ++
sound/soc/sof/intel/hda.c | 6 +-
tools/arch/x86/include/asm/msr-index.h | 1 +
tools/include/linux/kallsyms.h | 4 +
tools/objtool/check.c | 1 +
tools/testing/selftests/bpf/test_lru_map.c | 105 ++++-----
tools/testing/selftests/net/lib.sh | 2 +-
virt/kvm/kvm_main.c | 3 +
203 files changed, 2012 insertions(+), 833 deletions(-)
1 month, 2 weeks
- 20
- 212
[PATCH net v2 5/5] rxrpc: Fix to use conn aborts for conn-wide failures
by David Howells
Fix rxrpc to use connection-level aborts for things that affect the whole
connection, such as the service ID not matching a local service.
Fixes: 57af281e5389 ("rxrpc: Tidy up abort generation infrastructure")
Reported-by: Jeffrey Altman <jaltman(a)auristor.com>
Signed-off-by: David Howells <dhowells(a)redhat.com>
Reviewed-by: Jeffrey Altman <jaltman(a)auristor.com>
cc: Marc Dionne <marc.dionne(a)auristor.com>
cc: Jakub Kicinski <kuba(a)kernel.org>
cc: Paolo Abeni <pabeni(a)redhat.com>
cc: "David S. Miller" <davem(a)davemloft.net>
cc: Eric Dumazet <edumazet(a)google.com>
cc: Simon Horman <horms(a)kernel.org>
cc: linux-afs(a)lists.infradead.org
cc: netdev(a)vger.kernel.org
cc: stable(a)vger.kernel.org
---
Notes:
Changes
=======
ver #2)
- Moved trace note declaration out to earlier patch that uses it
net/rxrpc/ar-internal.h | 3 +++
net/rxrpc/call_accept.c | 12 ++++++------
net/rxrpc/io_thread.c | 14 ++++++++++++++
net/rxrpc/output.c | 19 ++++++++++---------
net/rxrpc/security.c | 8 ++++----
5 files changed, 37 insertions(+), 19 deletions(-)
diff --git a/net/rxrpc/ar-internal.h b/net/rxrpc/ar-internal.h
index df1a618dbf7d..5b7342d43486 100644
--- a/net/rxrpc/ar-internal.h
+++ b/net/rxrpc/ar-internal.h
@@ -44,6 +44,7 @@ enum rxrpc_skb_mark {
RXRPC_SKB_MARK_SERVICE_CONN_SECURED, /* Service connection response has been verified */
RXRPC_SKB_MARK_REJECT_BUSY, /* Reject with BUSY */
RXRPC_SKB_MARK_REJECT_ABORT, /* Reject with ABORT (code in skb->priority) */
+ RXRPC_SKB_MARK_REJECT_CONN_ABORT, /* Reject with connection ABORT (code in skb->priority) */
};
/*
@@ -1253,6 +1254,8 @@ int rxrpc_encap_rcv(struct sock *, struct sk_buff *);
void rxrpc_error_report(struct sock *);
bool rxrpc_direct_abort(struct sk_buff *skb, enum rxrpc_abort_reason why,
s32 abort_code, int err);
+bool rxrpc_direct_conn_abort(struct sk_buff *skb, enum rxrpc_abort_reason why,
+ s32 abort_code, int err);
int rxrpc_io_thread(void *data);
void rxrpc_post_response(struct rxrpc_connection *conn, struct sk_buff *skb);
static inline void rxrpc_wake_up_io_thread(struct rxrpc_local *local)
diff --git a/net/rxrpc/call_accept.c b/net/rxrpc/call_accept.c
index a4d76f2da684..00982a030744 100644
--- a/net/rxrpc/call_accept.c
+++ b/net/rxrpc/call_accept.c
@@ -374,8 +374,8 @@ bool rxrpc_new_incoming_call(struct rxrpc_local *local,
spin_lock(&rx->incoming_lock);
if (rx->sk.sk_state == RXRPC_SERVER_LISTEN_DISABLED ||
rx->sk.sk_state == RXRPC_CLOSE) {
- rxrpc_direct_abort(skb, rxrpc_abort_shut_down,
- RX_INVALID_OPERATION, -ESHUTDOWN);
+ rxrpc_direct_conn_abort(skb, rxrpc_abort_shut_down,
+ RX_INVALID_OPERATION, -ESHUTDOWN);
goto no_call;
}
@@ -422,12 +422,12 @@ bool rxrpc_new_incoming_call(struct rxrpc_local *local,
unsupported_service:
read_unlock_irq(&local->services_lock);
- return rxrpc_direct_abort(skb, rxrpc_abort_service_not_offered,
- RX_INVALID_OPERATION, -EOPNOTSUPP);
+ return rxrpc_direct_conn_abort(skb, rxrpc_abort_service_not_offered,
+ RX_INVALID_OPERATION, -EOPNOTSUPP);
unsupported_security:
read_unlock_irq(&local->services_lock);
- return rxrpc_direct_abort(skb, rxrpc_abort_service_not_offered,
- RX_INVALID_OPERATION, -EKEYREJECTED);
+ return rxrpc_direct_conn_abort(skb, rxrpc_abort_service_not_offered,
+ RX_INVALID_OPERATION, -EKEYREJECTED);
no_call:
spin_unlock(&rx->incoming_lock);
read_unlock_irq(&local->services_lock);
diff --git a/net/rxrpc/io_thread.c b/net/rxrpc/io_thread.c
index 27b650d30f4d..e939ecf417c4 100644
--- a/net/rxrpc/io_thread.c
+++ b/net/rxrpc/io_thread.c
@@ -97,6 +97,20 @@ bool rxrpc_direct_abort(struct sk_buff *skb, enum rxrpc_abort_reason why,
return false;
}
+/*
+ * Directly produce a connection abort from a packet.
+ */
+bool rxrpc_direct_conn_abort(struct sk_buff *skb, enum rxrpc_abort_reason why,
+ s32 abort_code, int err)
+{
+ struct rxrpc_skb_priv *sp = rxrpc_skb(skb);
+
+ trace_rxrpc_abort(0, why, sp->hdr.cid, 0, sp->hdr.seq, abort_code, err);
+ skb->mark = RXRPC_SKB_MARK_REJECT_CONN_ABORT;
+ skb->priority = abort_code;
+ return false;
+}
+
static bool rxrpc_bad_message(struct sk_buff *skb, enum rxrpc_abort_reason why)
{
return rxrpc_direct_abort(skb, why, RX_PROTOCOL_ERROR, -EBADMSG);
diff --git a/net/rxrpc/output.c b/net/rxrpc/output.c
index 17c33b5cf7dd..8b5903b6e481 100644
--- a/net/rxrpc/output.c
+++ b/net/rxrpc/output.c
@@ -829,7 +829,13 @@ void rxrpc_reject_packet(struct rxrpc_local *local, struct sk_buff *skb)
msg.msg_controllen = 0;
msg.msg_flags = 0;
- memset(&whdr, 0, sizeof(whdr));
+ whdr = (struct rxrpc_wire_header) {
+ .epoch = htonl(sp->hdr.epoch),
+ .cid = htonl(sp->hdr.cid),
+ .callNumber = htonl(sp->hdr.callNumber),
+ .serviceId = htons(sp->hdr.serviceId),
+ .flags = ~sp->hdr.flags & RXRPC_CLIENT_INITIATED,
+ };
switch (skb->mark) {
case RXRPC_SKB_MARK_REJECT_BUSY:
@@ -837,6 +843,9 @@ void rxrpc_reject_packet(struct rxrpc_local *local, struct sk_buff *skb)
size = sizeof(whdr);
ioc = 1;
break;
+ case RXRPC_SKB_MARK_REJECT_CONN_ABORT:
+ whdr.callNumber = 0;
+ fallthrough;
case RXRPC_SKB_MARK_REJECT_ABORT:
whdr.type = RXRPC_PACKET_TYPE_ABORT;
code = htonl(skb->priority);
@@ -850,14 +859,6 @@ void rxrpc_reject_packet(struct rxrpc_local *local, struct sk_buff *skb)
if (rxrpc_extract_addr_from_skb(&srx, skb) == 0) {
msg.msg_namelen = srx.transport_len;
- whdr.epoch = htonl(sp->hdr.epoch);
- whdr.cid = htonl(sp->hdr.cid);
- whdr.callNumber = htonl(sp->hdr.callNumber);
- whdr.serviceId = htons(sp->hdr.serviceId);
- whdr.flags = sp->hdr.flags;
- whdr.flags ^= RXRPC_CLIENT_INITIATED;
- whdr.flags &= RXRPC_CLIENT_INITIATED;
-
iov_iter_kvec(&msg.msg_iter, WRITE, iov, ioc, size);
ret = do_udp_sendmsg(local->socket, &msg, size);
if (ret < 0)
diff --git a/net/rxrpc/security.c b/net/rxrpc/security.c
index 078d91a6b77f..2bfbf2b2bb37 100644
--- a/net/rxrpc/security.c
+++ b/net/rxrpc/security.c
@@ -140,15 +140,15 @@ const struct rxrpc_security *rxrpc_get_incoming_security(struct rxrpc_sock *rx,
sec = rxrpc_security_lookup(sp->hdr.securityIndex);
if (!sec) {
- rxrpc_direct_abort(skb, rxrpc_abort_unsupported_security,
- RX_INVALID_OPERATION, -EKEYREJECTED);
+ rxrpc_direct_conn_abort(skb, rxrpc_abort_unsupported_security,
+ RX_INVALID_OPERATION, -EKEYREJECTED);
return NULL;
}
if (sp->hdr.securityIndex != RXRPC_SECURITY_NONE &&
!rx->securities) {
- rxrpc_direct_abort(skb, rxrpc_abort_no_service_key,
- sec->no_key_abort, -EKEYREJECTED);
+ rxrpc_direct_conn_abort(skb, rxrpc_abort_no_service_key,
+ sec->no_key_abort, -EKEYREJECTED);
return NULL;
}
1 month, 2 weeks
- 1
- 0
[PATCH net v2 4/5] rxrpc: Fix transmission of an abort in response to an abort
by David Howells
Under some circumstances, such as when a server socket is closing, ABORT
packets will be generated in response to incoming packets. Unfortunately,
this also may include generating aborts in response to incoming aborts -
which may cause a cycle. It appears this may be made possible by giving
the client a multicast address.
Fix this such that rxrpc_reject_packet() will refuse to generate aborts in
response to aborts.
Fixes: 248f219cb8bc ("rxrpc: Rewrite the data and ack handling code")
Signed-off-by: David Howells <dhowells(a)redhat.com>
Reviewed-by: Jeffrey Altman <jaltman(a)auristor.com>
cc: Marc Dionne <marc.dionne(a)auristor.com>
cc: Junvyyang, Tencent Zhuque Lab <zhuque(a)tencent.com>
cc: LePremierHomme <kwqcheii(a)proton.me>
cc: Linus Torvalds <torvalds(a)linux-foundation.org>
cc: Jakub Kicinski <kuba(a)kernel.org>
cc: Paolo Abeni <pabeni(a)redhat.com>
cc: "David S. Miller" <davem(a)davemloft.net>
cc: Eric Dumazet <edumazet(a)google.com>
cc: Simon Horman <horms(a)kernel.org>
cc: linux-afs(a)lists.infradead.org
cc: netdev(a)vger.kernel.org
cc: stable(a)vger.kernel.org
---
net/rxrpc/output.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/net/rxrpc/output.c b/net/rxrpc/output.c
index ef7b3096c95e..17c33b5cf7dd 100644
--- a/net/rxrpc/output.c
+++ b/net/rxrpc/output.c
@@ -814,6 +814,9 @@ void rxrpc_reject_packet(struct rxrpc_local *local, struct sk_buff *skb)
__be32 code;
int ret, ioc;
+ if (sp->hdr.type == RXRPC_PACKET_TYPE_ABORT)
+ return; /* Never abort an abort. */
+
rxrpc_see_skb(skb, rxrpc_skb_see_reject);
iov[0].iov_base = &whdr;
1 month, 2 weeks
- 1
- 0
[PATCH net v2 3/5] rxrpc: Fix notification vs call-release vs recvmsg
by David Howells
When a call is released, rxrpc takes the spinlock and removes it from
->recvmsg_q in an effort to prevent racing recvmsg() invocations from
seeing the same call. Now, rxrpc_recvmsg() only takes the spinlock when
actually removing a call from the queue; it doesn't, however, take it in
the lead up to that when it checks to see if the queue is empty. It *does*
hold the socket lock, which prevents a recvmsg/recvmsg race - but this
doesn't prevent sendmsg from ending the call because sendmsg() drops the
socket lock and relies on the call->user_mutex.
Fix this by firstly removing the bit in rxrpc_release_call() that dequeues
the released call and, instead, rely on recvmsg() to simply discard
released calls (done in a preceding fix).
Secondly, rxrpc_notify_socket() is abandoned if the call is already marked
as released rather than trying to be clever by setting both pointers in
call->recvmsg_link to NULL to trick list_empty(). This isn't perfect and
can still race, resulting in a released call on the queue, but recvmsg()
will now clean that up.
Fixes: 17926a79320a ("[AF_RXRPC]: Provide secure RxRPC sockets for use by userspace and kernel both")
Signed-off-by: David Howells <dhowells(a)redhat.com>
Reviewed-by: Jeffrey Altman <jaltman(a)auristor.com>
cc: Marc Dionne <marc.dionne(a)auristor.com>
cc: Junvyyang, Tencent Zhuque Lab <zhuque(a)tencent.com>
cc: LePremierHomme <kwqcheii(a)proton.me>
cc: Jakub Kicinski <kuba(a)kernel.org>
cc: Paolo Abeni <pabeni(a)redhat.com>
cc: "David S. Miller" <davem(a)davemloft.net>
cc: Eric Dumazet <edumazet(a)google.com>
cc: Simon Horman <horms(a)kernel.org>
cc: linux-afs(a)lists.infradead.org
cc: netdev(a)vger.kernel.org
cc: stable(a)vger.kernel.org
---
Notes:
Changes
=======
ver #2)
- Moved in missing trace note declaration from later patch
include/trace/events/rxrpc.h | 3 ++-
net/rxrpc/call_object.c | 28 ++++++++++++----------------
net/rxrpc/recvmsg.c | 4 ++++
3 files changed, 18 insertions(+), 17 deletions(-)
diff --git a/include/trace/events/rxrpc.h b/include/trace/events/rxrpc.h
index e7dcfb1369b6..de6f6d25767c 100644
--- a/include/trace/events/rxrpc.h
+++ b/include/trace/events/rxrpc.h
@@ -322,10 +322,10 @@
EM(rxrpc_call_put_kernel, "PUT kernel ") \
EM(rxrpc_call_put_poke, "PUT poke ") \
EM(rxrpc_call_put_recvmsg, "PUT recvmsg ") \
+ EM(rxrpc_call_put_release_recvmsg_q, "PUT rls-rcmq") \
EM(rxrpc_call_put_release_sock, "PUT rls-sock") \
EM(rxrpc_call_put_release_sock_tba, "PUT rls-sk-a") \
EM(rxrpc_call_put_sendmsg, "PUT sendmsg ") \
- EM(rxrpc_call_put_unnotify, "PUT unnotify") \
EM(rxrpc_call_put_userid_exists, "PUT u-exists") \
EM(rxrpc_call_put_userid, "PUT user-id ") \
EM(rxrpc_call_see_accept, "SEE accept ") \
@@ -338,6 +338,7 @@
EM(rxrpc_call_see_disconnected, "SEE disconn ") \
EM(rxrpc_call_see_distribute_error, "SEE dist-err") \
EM(rxrpc_call_see_input, "SEE input ") \
+ EM(rxrpc_call_see_notify_released, "SEE nfy-rlsd") \
EM(rxrpc_call_see_recvmsg, "SEE recvmsg ") \
EM(rxrpc_call_see_release, "SEE release ") \
EM(rxrpc_call_see_userid_exists, "SEE u-exists") \
diff --git a/net/rxrpc/call_object.c b/net/rxrpc/call_object.c
index 15067ff7b1f2..918f41d97a2f 100644
--- a/net/rxrpc/call_object.c
+++ b/net/rxrpc/call_object.c
@@ -561,7 +561,7 @@ static void rxrpc_cleanup_rx_buffers(struct rxrpc_call *call)
void rxrpc_release_call(struct rxrpc_sock *rx, struct rxrpc_call *call)
{
struct rxrpc_connection *conn = call->conn;
- bool put = false, putu = false;
+ bool putu = false;
_enter("{%d,%d}", call->debug_id, refcount_read(&call->ref));
@@ -573,23 +573,13 @@ void rxrpc_release_call(struct rxrpc_sock *rx, struct rxrpc_call *call)
rxrpc_put_call_slot(call);
- /* Make sure we don't get any more notifications */
+ /* Note that at this point, the call may still be on or may have been
+ * added back on to the socket receive queue. recvmsg() must discard
+ * released calls. The CALL_RELEASED flag should prevent further
+ * notifications.
+ */
spin_lock_irq(&rx->recvmsg_lock);
-
- if (!list_empty(&call->recvmsg_link)) {
- _debug("unlinking once-pending call %p { e=%lx f=%lx }",
- call, call->events, call->flags);
- list_del(&call->recvmsg_link);
- put = true;
- }
-
- /* list_empty() must return false in rxrpc_notify_socket() */
- call->recvmsg_link.next = NULL;
- call->recvmsg_link.prev = NULL;
-
spin_unlock_irq(&rx->recvmsg_lock);
- if (put)
- rxrpc_put_call(call, rxrpc_call_put_unnotify);
write_lock(&rx->call_lock);
@@ -638,6 +628,12 @@ void rxrpc_release_calls_on_socket(struct rxrpc_sock *rx)
rxrpc_put_call(call, rxrpc_call_put_release_sock);
}
+ while ((call = list_first_entry_or_null(&rx->recvmsg_q,
+ struct rxrpc_call, recvmsg_link))) {
+ list_del_init(&call->recvmsg_link);
+ rxrpc_put_call(call, rxrpc_call_put_release_recvmsg_q);
+ }
+
_leave("");
}
diff --git a/net/rxrpc/recvmsg.c b/net/rxrpc/recvmsg.c
index 6990e37697de..7fa7e77f6bb9 100644
--- a/net/rxrpc/recvmsg.c
+++ b/net/rxrpc/recvmsg.c
@@ -29,6 +29,10 @@ void rxrpc_notify_socket(struct rxrpc_call *call)
if (!list_empty(&call->recvmsg_link))
return;
+ if (test_bit(RXRPC_CALL_RELEASED, &call->flags)) {
+ rxrpc_see_call(call, rxrpc_call_see_notify_released);
+ return;
+ }
rcu_read_lock();
1 month, 2 weeks
- 1
- 0